diff --git src/lsm_daemon.c src/lsm_daemon.c index 6bc7a70..670fb17 100644 --- src/lsm_daemon.c +++ src/lsm_daemon.c @@ -41,6 +41,7 @@ #include #include #include +#include #define BASE_DIR "/var/run/lsm" #define SOCKET_DIR BASE_DIR"/ipc" @@ -155,6 +156,11 @@ void drop_privileges(void) loud("Unexpected error on setgid(errno %d)\n", err); } + if( -1 == setgroups(1, &pw->pw_gid) ) { + err = errno; + loud("Unexpected error on setgroups(errno %d)\n", err); + } + if( -1 == setuid(pw->pw_uid) ) { err = errno; loud("Unexpected error on setuid(errno %d)\n", err);