static void drop_privileges_or_die(uid_t uid, gid_t gid) {
/* Drop all supplementary group IDs. */
+#ifdef __FreeBSD__
+ {
+ /* FreeBSD uses the first gid to set the egid of the process. */
+ gid_t egid = gid;
+ if (setgroups(1, &egid) != 0) {
+ die("setgroups");
+ }
+ if (getgroups(1, &egid) != 1) {
+ die_fmt("failed to drop all supplementary groups\n");
+ }
+ if (egid != gid) {
+ die_fmt("failed to drop all supplementary groups (egid): %d %d\n",
+ egid, gid);
+ }
+ }
+#else
if (setgroups(0, NULL) != 0) {
die("setgroups");
}
if (getgroups(0, NULL) != 0) {
- die_fmt("failed to drop all supplementary groups");
+ die_fmt("failed to drop all supplementary groups\n");
}
+#endif
/* Dropping groups may require privileges, do that first. */
if (setresgid(gid, gid, gid) != 0) {
}
if ( uid != ruid || uid != euid || uid != suid
|| gid != rgid || gid != egid || gid != sgid) {
- die_fmt("failed to drop privileges");
+ die_fmt("failed to drop privileges\n");
}
}
/* Just to be safe. */
if (setuid(0) != -1) {
- die_fmt("failed to drop privileges (setuid)");
+ die_fmt("failed to drop privileges (setuid)\n");
}
}