Check and fail if drop of privileges failed.
MFC after: 2 weeks
This commit is contained in:
parent
0a107daff7
commit
6fcf3575e2
@ -148,7 +148,8 @@ main(int argc, char **argv)
|
||||
* Discard setgid privileges if not the running kernel so that
|
||||
* bad guys can't print interesting stuff from kernel memory.
|
||||
*/
|
||||
setgid(getgid());
|
||||
if (setgid(getgid()) != 0)
|
||||
err(1, "setgid");
|
||||
}
|
||||
else
|
||||
syst = getbootfile();
|
||||
@ -157,7 +158,8 @@ main(int argc, char **argv)
|
||||
errx(1, "%s: no namelist", syst);
|
||||
if ((memf = open(core, O_RDONLY)) < 0)
|
||||
err(2, "%s", core);
|
||||
setgid(getgid());
|
||||
if (setgid(getgid()) != 0)
|
||||
err(1, "setgid");
|
||||
if (kflag)
|
||||
errx(1, "can't do core files yet");
|
||||
(void)klseek(memf, (off_t)nl[N_TCP_DEBX].n_value, L_SET);
|
||||
|
Loading…
Reference in New Issue
Block a user