max/nix-super
1
0
Fork 0
mirror of https://github.com/privatevoid-net/nix-super.git synced 2024-12-01 18:16:14 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions

chdir, setgroups

Browse source
This commit is contained in:
Graham Christensen 2019-05-11 15:57:38 -04:00
parent 6df61db060
commit dde8eeb39a
No known key found for this signature in database
GPG key ID: ACA1C1D120C83D5C
1 changed files with 4 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
src/libstore/build.cc
View file

@ -466,8 +466,12 @@ void handleDiffHook(bool allowVfork, uid_t uid, uid_t gid, Path tryA, Path tryB,
auto diffHook = settings.diffHook; auto diffHook = settings.diffHook;
if (diffHook != "" && settings.runDiffHook) { if (diffHook != "" && settings.runDiffHook) {
auto wrapper = [&]() { auto wrapper = [&]() {
if (chdir("/") == -1)
throw SysError("chdir / failed");
if (setgid(gid) == -1) if (setgid(gid) == -1)
throw SysError("setgid failed"); throw SysError("setgid failed");
if (setgroups(0, 0) == -1)
throw SysError("setgroups failed");
if (setuid(uid) == -1) if (setuid(uid) == -1)
throw SysError("setuid failed"); throw SysError("setuid failed");