diff options
| author | Ophestra <cat@gensokyo.uk> | 2025-10-08 18:22:24 +0900 |
|---|---|---|
| committer | Ophestra <cat@gensokyo.uk> | 2025-10-08 18:22:24 +0900 |
| commit | 5bf28901a44e36476900b3671958c1a27cef0ba0 (patch) | |
| tree | cb6d8afdb5d00af7158df46d4af6ca98f872a993 /cmd/hsu/main.go | |
| parent | 9b507715d42f74c3f18fe817c2464abfca1b0182 (diff) | |
cmd/hsu: check against setgid bit
The getgroups behaviour is already checked for, but it never hurts to be more careful in a setuid program.
Signed-off-by: Ophestra <cat@gensokyo.uk>
Diffstat (limited to 'cmd/hsu/main.go')
| -rw-r--r-- | cmd/hsu/main.go | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/cmd/hsu/main.go b/cmd/hsu/main.go index 1f6ca7b6..27b97b5c 100644 --- a/cmd/hsu/main.go +++ b/cmd/hsu/main.go @@ -34,6 +34,9 @@ func main() { if os.Geteuid() != 0 { log.Fatal("this program must be owned by uid 0 and have the setuid bit set") } + if os.Getegid() != os.Getgid() { + log.Fatal("this program must not have the setgid bit set") + } puid := os.Getuid() if puid == 0 { |