Merge "Set idmap2 binary uid and gid after forking" into qt-dev am: ebad9125c8 am: e9acb9c566
am: 18e2a06453
Change-Id: I0bf570d5c4198f3ff9e5c4c62c8b88bc48db7ec6
This commit is contained in:
@@ -64,6 +64,9 @@ std::unique_ptr<ProcResult> ExecuteBinary(const std::vector<std::string>& argv)
|
||||
return nullptr;
|
||||
}
|
||||
|
||||
auto gid = getgid();
|
||||
auto uid = getuid();
|
||||
|
||||
char const** argv0 = (char const**)malloc(sizeof(char*) * (argv.size() + 1));
|
||||
for (size_t i = 0; i < argv.size(); i++) {
|
||||
argv0[i] = argv[i].c_str();
|
||||
@@ -75,6 +78,16 @@ std::unique_ptr<ProcResult> ExecuteBinary(const std::vector<std::string>& argv)
|
||||
PLOG(ERROR) << "fork";
|
||||
return nullptr;
|
||||
case 0: // child
|
||||
if (setgid(gid) != 0) {
|
||||
PLOG(ERROR) << "setgid";
|
||||
exit(1);
|
||||
}
|
||||
|
||||
if (setuid(uid) != 0) {
|
||||
PLOG(ERROR) << "setuid";
|
||||
exit(1);
|
||||
}
|
||||
|
||||
close(stdout[0]);
|
||||
if (dup2(stdout[1], STDOUT_FILENO) == -1) {
|
||||
abort();
|
||||
|
||||
Reference in New Issue
Block a user