ceos/cagebreak
1
0
Fork 0
mirror of https://cagebreak.project-repo.co/cagebreak.git synced 2026-08-20 20:44:18 +02:00
Code Issues Projects Releases Packages Wiki Activity

Fix permission dropping

Browse source
This commit is contained in:
project-repo 2020-05-29 16:13:52 +02:00
commit 35a15670ea
1 changed files with 3 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

5
cagebreak.c
View file

@ -88,13 +88,14 @@ sig_chld_handler(int signal) {
static bool
drop_permissions(void) {
if(getuid() != geteuid() || getgid() != getegid()) {
if(setuid(getuid()) != 0 || setgid(getgid()) != 0) {
// Set gid before uid
if(setgid(getgid()) != 0 || setuid(getuid()) != 0) {
wlr_log(WLR_ERROR, "Unable to drop root, refusing to start");
return false;
}
}
if(setuid(0) != -1) {
if(setgid(0) != -1 || setuid(0) != -1) {
wlr_log(WLR_ERROR, "Unable to drop root (we shouldn't be able to "
"restore it after setuid), refusing to start");
return false;