mirror of
https://gitlab.com/chrony/chrony.git
synced 2025-12-05 22:35:06 -05:00
sys: specify process context for dropping root
Similarly to enabling the syscall filter, specify what kind of chronyd process is dropping the root privileges.
This commit is contained in:
@@ -646,7 +646,7 @@ run_helper(uid_t uid, gid_t gid, int scfilter_level)
|
||||
LOG_SetMinSeverity(log_severity);
|
||||
|
||||
if (!geteuid() && (uid || gid))
|
||||
SYS_DropRoot(uid, gid);
|
||||
SYS_DropRoot(uid, gid, SYS_NTSKE_HELPER);
|
||||
|
||||
NKS_Initialise();
|
||||
|
||||
|
||||
Reference in New Issue
Block a user