mirror of
https://github.com/strongswan/strongswan.git
synced 2025-10-05 00:00:45 -04:00
capabilities: initialize supplementary groups only when doing a setuid()
This commit is contained in:
parent
2e9201f4ef
commit
b1bd63547b
@ -225,7 +225,7 @@ METHOD(capabilities_t, drop, bool,
|
||||
prctl(PR_SET_KEEPCAPS, 1, 0, 0, 0);
|
||||
#endif
|
||||
|
||||
if (!init_supplementary_groups(this))
|
||||
if (this->uid && !init_supplementary_groups(this))
|
||||
{
|
||||
DBG1(DBG_LIB, "initializing supplementary groups for %u failed",
|
||||
this->uid);
|
||||
|
Loading…
x
Reference in New Issue
Block a user