You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
If this call fails then supplemental groups may not be dropped as intended and this may have security impact. Additionally it might be better to swap setgroups with initgroups for the target user. This makes sure the process gains potentially restrictive groups. In either case if the result is non-0 then the program should fail.
The text was updated successfully, but these errors were encountered:
Hi, I was reviewing the privilege dropping code and saw that the return from
setgroups
is not checked.redsocks/base.c
Line 399 in c3fc945
If this call fails then supplemental groups may not be dropped as intended and this may have security impact. Additionally it might be better to swap
setgroups
withinitgroups
for the target user. This makes sure the process gains potentially restrictive groups. In either case if the result is non-0 then the program should fail.The text was updated successfully, but these errors were encountered: