From: Vsevolod Stakhov Date: Wed, 20 Feb 2019 13:14:30 +0000 (+0000) Subject: [Fix] Set rspamd user to initialise supplementary groups on reload X-Git-Tag: 1.9.0~109 X-Git-Url: https://source.dussan.org/?a=commitdiff_plain;h=11c49dc9ac730bdaa2f6b26ff877b9ba87f38572;p=rspamd.git [Fix] Set rspamd user to initialise supplementary groups on reload Issue: #2693 Closes: #2693 --- diff --git a/src/libserver/worker_util.c b/src/libserver/worker_util.c index e10e25bc0..a52dd3ccb 100644 --- a/src/libserver/worker_util.c +++ b/src/libserver/worker_util.c @@ -513,12 +513,14 @@ rspamd_worker_drop_priv (struct rspamd_main *rspamd_main) strerror (errno)); exit (-errno); } + if (rspamd_main->cfg->rspamd_user && - initgroups (rspamd_main->cfg->rspamd_user, rspamd_main->workers_gid) == - -1) { + initgroups (rspamd_main->cfg->rspamd_user, + rspamd_main->workers_gid) == -1) { msg_err_main ("initgroups failed (%s), aborting", strerror (errno)); exit (-errno); } + if (setuid (rspamd_main->workers_uid) == -1) { msg_err_main ("cannot setuid to %d (%s), aborting", (gint) rspamd_main->workers_uid, diff --git a/src/rspamd.c b/src/rspamd.c index 88b44d773..85191e949 100644 --- a/src/rspamd.c +++ b/src/rspamd.c @@ -178,6 +178,7 @@ read_cmd_line (gint *argc, gchar ***argv, struct rspamd_config *cfg) else { cfg->cfg_name = cfg_names[0]; } + for (i = 1; i < cfg_num; i++) { r = fork (); if (r == 0) { @@ -313,6 +314,9 @@ reread_config (struct rspamd_main *rspamd_main) REF_RELEASE (old_cfg); msg_info_main ("config has been reread successfully"); rspamd_map_preload (rspamd_main->cfg); + + rspamd_main->cfg->rspamd_user = rspamd_user; + rspamd_main->cfg->rspamd_group = rspamd_group; } }