From 5c2880becc94141b8035b3488b6bd60696011308 Mon Sep 17 00:00:00 2001 From: Laurent Bercot Date: Sat, 21 Nov 2020 02:22:09 +0000 Subject: Privs can only be dropped after reading key files. --- src/conn-tools/s6tls_drop.c | 24 ------------------------ 1 file changed, 24 deletions(-) delete mode 100644 src/conn-tools/s6tls_drop.c (limited to 'src/conn-tools/s6tls_drop.c') diff --git a/src/conn-tools/s6tls_drop.c b/src/conn-tools/s6tls_drop.c deleted file mode 100644 index 6b6f67f..0000000 --- a/src/conn-tools/s6tls_drop.c +++ /dev/null @@ -1,24 +0,0 @@ -/* ISC license. */ - -#include -#include - -#include -#include - -#include "s6tls-internal.h" - -void s6tls_drop (void) -{ - if (!getuid()) - { - uid_t uid ; - gid_t gid ; - char const *x = getenv("TLS_UID") ; - if (x && !uid0_scan(x, &uid)) strerr_dieinvalid(100, "TLS_UID") ; - x = getenv("TLS_GID") ; - if (x && !gid0_scan(x, &gid)) strerr_dieinvalid(100, "TLS_GID") ; - if (gid && setgid(gid) < 0) strerr_diefu1sys(111, "setgid") ; - if (uid && setuid(uid) < 0) strerr_diefu1sys(111, "setuid") ; - } -} -- cgit v1.3.1