sendnrw/netbird
2
0
Fork 0
mirror of https://github.com/netbirdio/netbird.git synced 2026-09-27 09:09:07 +02:00
Code Issues Packages Projects Releases Wiki Activity

Reject empty approval request_id and verify gid after setgid

Browse Source
This commit is contained in:
Viktor Liu
2026-07-13 11:52:50 +02:00
parent 2b8c7f4d5d
commit b747cf1547
2 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
client/cmd/vnc_agent_dropprivs_darwin.go
+3
View File
@@ -49,6 +49,9 @@ func dropAgentPrivileges(targetUID uint32) error {
if err := syscall.Setgid(targetGID); err != nil {
return fmt.Errorf("setgid(%d): %w", targetGID, err)
}
if os.Getgid() != targetGID || os.Getegid() != targetGID {
return fmt.Errorf("setgid verification: gid=%d egid=%d, expected %d", os.Getgid(), os.Getegid(), targetGID)
}
if err := syscall.Setuid(int(targetUID)); err != nil {
return fmt.Errorf("setuid(%d): %w", targetUID, err)
}