Allow dropping privs

2025-06-29 10:30:23 +02:00 · 2013-05-03 22:26:07 +02:00
parent c885e875ad
commit e0c3073d82
2 changed files with 7 additions and 0 deletions
--- a/lib/openvpn-status-web.rb
+++ b/lib/openvpn-status-web.rb
@ -105,6 +105,10 @@ module OpenVPNStatusWeb

      OpenVPNStatusWeb.logger.info "Starting..."

+      # drop privs (first change group than user)
+      Process::Sys.setgid(Etc.getgrnam(config['group']).gid) if config['group']
+      Process::Sys.setuid(Etc.getpwnam(config['user']).uid) if config['user']
+
      # configure rack
      app = Daemon.new(config['vpns'])
      if ENV['RACK_ENV'] == "development"