Changeset 00c910

Timestamp:

07/12/08 14:05:59 (5 years ago)

Author:

Andrew Griffiths <andrewg@…>

Branches:

master

Children:

f70d16

Parents:

090c5f

git-author:

Andrew Griffiths <andrewg@…> (07/12/08 14:05:59)

git-committer:

Erik Ekman <erik@…> (02/04/12 20:33:56)

Message:

applied security patch from Andrew Griffiths, limit user groups

Location:

src

Files:

• iodine.c (modified) (1 diff)
• iodined.c (modified) (1 diff)

src/iodine.c

@@ -731 +731 @@
         
         if (username != NULL) {
-                if (setgid(pw->pw_gid) < 0 || setuid(pw->pw_uid) < 0) {
+                gid_t gids[1];
+                gids[0] = pw->pw_gid;
+                if (setgroups(1, gids) < 0 || setgid(pw->pw_gid) < 0 || setuid(pw->pw_uid) < 0) {
                         warnx("Could not switch to user %s!\n", username);
                         usage();

src/iodined.c

@@ -584 +584 @@
         signal(SIGINT, sigint);
         if (username != NULL) {
-                if (setgid(pw->pw_gid) < 0 || setuid(pw->pw_uid) < 0) {
+                gid_t gids[1];
+                gids[0] = pw->pw_gid;
+                if (setgroups(1, gids) < 0 || setgid(pw->pw_gid) < 0 || setuid(pw->pw_uid) < 0) {
                         warnx("Could not switch to user %s!\n", username);
                         usage();