It looks like the code to drop privileges may have been broken via
commit 37f0e1f
. That commit reverted the correct order from #911, which
first drops the gid then the uid. If setuid is called first then the
target user may not have the ability to setgid.
master
parent
0b709702c1
commit
31a83bd48d
Loading…
Reference in new issue