forks/molly-brown
1
0
Fork 0
Code Releases Activity

Only drop supplementary groups if root is amongst them.

Browse source
This commit is contained in:
Solderpunk 2023-02-23 20:03:21 +01:00
parent 0274ef8f35
commit c50accfaec
1 changed files with 4 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
security_dropprivs.go
View file

@ -77,12 +77,10 @@ func DropPrivs(ui userInfo) error {
}
// Drop supplementary groups
if ui.root_supp_goup {
err := syscall.Setgroups([]int{})
if err != nil {
// Log failure
log.Println("Could not unset supplementary groups: " + err.Error())
// Make this fatal if root was amongst supplementary groups
if ui.root_supp_group {
return err
}
}