mirror of
https://github.com/asterisk/asterisk.git
synced 2025-09-18 18:58:22 +00:00
issue #5621
git-svn-id: https://origsvn.digium.com/svn/asterisk/trunk@7004 65c4cc65-6c06-0410-ace0-fbb531ad65f3
This commit is contained in:
16
asterisk.c
16
asterisk.c
@@ -194,6 +194,8 @@ char ast_config_AST_KEY_DIR[AST_CONFIG_MAX_PATH];
|
||||
char ast_config_AST_PID[AST_CONFIG_MAX_PATH];
|
||||
char ast_config_AST_SOCKET[AST_CONFIG_MAX_PATH];
|
||||
char ast_config_AST_RUN_DIR[AST_CONFIG_MAX_PATH];
|
||||
char ast_config_AST_RUN_USER[AST_CONFIG_MAX_PATH];
|
||||
char ast_config_AST_RUN_GROUP[AST_CONFIG_MAX_PATH];
|
||||
char ast_config_AST_CTL_PERMISSIONS[AST_CONFIG_MAX_PATH];
|
||||
char ast_config_AST_CTL_OWNER[AST_CONFIG_MAX_PATH] = "\0";
|
||||
char ast_config_AST_CTL_GROUP[AST_CONFIG_MAX_PATH] = "\0";
|
||||
@@ -1885,6 +1887,12 @@ static void ast_readconfig(void) {
|
||||
} else if ((sscanf(v->value, "%lf", &option_maxload) != 1) || (option_maxload < 0.0)) {
|
||||
option_maxload = 0.0;
|
||||
}
|
||||
/* What user to run as */
|
||||
} else if (!strcasecmp(v->name, "runuser")) {
|
||||
ast_copy_string(ast_config_AST_RUN_USER, v->value, sizeof(ast_config_AST_RUN_USER));
|
||||
/* What group to run as */
|
||||
} else if (!strcasecmp(v->name, "rungroup")) {
|
||||
ast_copy_string(ast_config_AST_RUN_GROUP, v->value, sizeof(ast_config_AST_RUN_GROUP));
|
||||
}
|
||||
v = v->next;
|
||||
}
|
||||
@@ -2047,6 +2055,10 @@ int main(int argc, char *argv[])
|
||||
ast_verbose("[ Reading Master Configuration ]");
|
||||
ast_readconfig();
|
||||
|
||||
if ((!rungroup) && !ast_strlen_zero(ast_config_AST_RUN_GROUP))
|
||||
rungroup = ast_config_AST_RUN_GROUP;
|
||||
if ((!runuser) && !ast_strlen_zero(ast_config_AST_RUN_USER))
|
||||
runuser = ast_config_AST_RUN_USER;
|
||||
#ifndef __CYGWIN__
|
||||
|
||||
if (!is_child_of_nonroot && ast_set_priority(option_highpriority)) {
|
||||
@@ -2064,6 +2076,10 @@ int main(int argc, char *argv[])
|
||||
ast_log(LOG_WARNING, "Unable to setgid to %d (%s)\n", gr->gr_gid, rungroup);
|
||||
exit(1);
|
||||
}
|
||||
if (setgroups(0, NULL)) {
|
||||
ast_log(LOG_WARNING, "Unable to drop unneeded groups\n");
|
||||
exit(1);
|
||||
}
|
||||
if (option_verbose)
|
||||
ast_verbose("Running as group '%s'\n", rungroup);
|
||||
}
|
||||
|
Reference in New Issue
Block a user