mirror/ molly-brown
1
1
Fork 0
mirror of https://tildegit.org/solderpunk/molly-brown synced 2024-05-11 15:26:03 +02:00
Code

Only drop supplementary groups if root is amongst them.

This commit is contained in:
Solderpunk 2023-02-23 20:03:21 +01:00
parent 0274ef8f35
commit c50accfaec
1 changed files with 4 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
security_dropprivs.go
View File

@ -77,12 +77,10 @@ func DropPrivs(ui userInfo) error {
} }
// Drop supplementary groups // Drop supplementary groups
err := syscall.Setgroups([]int{}) if ui.root_supp_goup {
if err != nil { err := syscall.Setgroups([]int{})
// Log failure if err != nil {
log.Println("Could not unset supplementary groups: " + err.Error()) log.Println("Could not unset supplementary groups: " + err.Error())
// Make this fatal if root was amongst supplementary groups
if ui.root_supp_group {
return err return err
} }
} }