Check and fail if drop of privileges failed.

MFC after:	2 weeks
This commit is contained in:
Xin LI 2015-09-01 06:32:02 +00:00
parent 0a107daff7
commit 6fcf3575e2

View File

@ -148,7 +148,8 @@ main(int argc, char **argv)
* Discard setgid privileges if not the running kernel so that
* bad guys can't print interesting stuff from kernel memory.
*/
setgid(getgid());
if (setgid(getgid()) != 0)
err(1, "setgid");
}
else
syst = getbootfile();
@ -157,7 +158,8 @@ main(int argc, char **argv)
errx(1, "%s: no namelist", syst);
if ((memf = open(core, O_RDONLY)) < 0)
err(2, "%s", core);
setgid(getgid());
if (setgid(getgid()) != 0)
err(1, "setgid");
if (kflag)
errx(1, "can't do core files yet");
(void)klseek(memf, (off_t)nl[N_TCP_DEBX].n_value, L_SET);