mirror of
https://github.com/strongswan/strongswan.git
synced 2025-10-05 00:00:45 -04:00
capabilities: initialize supplementary groups only when doing a setuid()
This commit is contained in:
parent
2e9201f4ef
commit
b1bd63547b
@ -225,7 +225,7 @@ METHOD(capabilities_t, drop, bool,
|
|||||||
prctl(PR_SET_KEEPCAPS, 1, 0, 0, 0);
|
prctl(PR_SET_KEEPCAPS, 1, 0, 0, 0);
|
||||||
#endif
|
#endif
|
||||||
|
|
||||||
if (!init_supplementary_groups(this))
|
if (this->uid && !init_supplementary_groups(this))
|
||||||
{
|
{
|
||||||
DBG1(DBG_LIB, "initializing supplementary groups for %u failed",
|
DBG1(DBG_LIB, "initializing supplementary groups for %u failed",
|
||||||
this->uid);
|
this->uid);
|
||||||
|
Loading…
x
Reference in New Issue
Block a user