drop root privileges after bind

roa · Mar 22, 2012 · 056f309 · 056f309
1 parent 9642523
commit 056f309
Show file tree

Hide file tree

Showing 2 changed files with 13 additions and 0 deletions.
diff --git a/SSLServer.cpp b/SSLServer.cpp
@@ -27,6 +27,8 @@ void SSLServer::run()
         abort();
     }
 
+    dropRights();
+
     fd_set fds;
 
     int afd = BIO_get_fd( abio,NULL );
@@ -210,3 +212,13 @@ std::string SSLServer::decodeDigest( std::string digest )
 
     return decoded;
 }
+
+void SSLServer::dropRights()
+{
+    if (getuid() == 0) {
+    if (setgid( 1000 ) != 0)
+        printf("setgid: Unable to drop group privileges: %s", strerror(errno));
+    if (setuid( 1000 ) != 0)
+        printf("setuid: Unable to drop user privileges: %S", strerror(errno));
+    }
+}
diff --git a/SSLServer.h b/SSLServer.h
@@ -33,6 +33,7 @@ class SSLServer
     std::string createAnswer200();
     bool parseReq( std::string req );
     std::string decodeDigest( std::string digest );
+    void dropRights();
 
 };