forks/molly-brown
1
0
Fork 0
Code Releases Activity

Only drop supplementary groups if root is amongst them.

Browse source
This commit is contained in:
Solderpunk 2023-02-23 20:03:21 +01:00
parent 0274ef8f35
commit c50accfaec
1 changed files with 4 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
security_dropprivs.go
View file

@ -77,12 +77,10 @@ func DropPrivs(ui userInfo) error {
} }
// Drop supplementary groups // Drop supplementary groups
err := syscall.Setgroups([]int{}) if ui.root_supp_goup {
if err != nil { err := syscall.Setgroups([]int{})
// Log failure if err != nil {
log.Println("Could not unset supplementary groups: " + err.Error()) log.Println("Could not unset supplementary groups: " + err.Error())
// Make this fatal if root was amongst supplementary groups
if ui.root_supp_group {
return err return err
} }
} }