security/gringotts/files/patch-grg_safe.c


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36

--- src/grg_safe.c.orig Wed May 14 02:02:13 2003
+++ src/grg_safe.c  Wed May 14 02:03:43 2003
@@ -33,6 +33,7 @@
 
 #include <stdlib.h>
 #include <string.h>
+#include <sys/types.h>
 #include <regex.h>
 #include <unistd.h>
 #include <fcntl.h>
@@ -43,7 +44,6 @@
 #include <sys/fsuid.h>
 #endif
 #include <sys/time.h>
-#include <sys/types.h>
 #include <sys/resource.h>
 #include <sys/stat.h>
 
@@ -59,8 +59,6 @@
 grg_mlockall_and_drop_root_privileges(void)
 {
     // drop eventual group root privileges
-    setgid(getgid());
-    setgid(getgid());      // twice for counter "saved IDs", cfr.
                // Secure Programming HowTo
 #ifdef HAVE_SYS_FSUID_H
     setfsgid(getgid());
@@ -84,8 +82,6 @@
 #endif
 
    // drop root privileges
-   setuid(getuid());
-   setuid(getuid());
 #ifdef HAVE_SYS_FSUID_H
    setfsuid(getuid());
    setfsuid(getuid());