]> git.ipfire.org Git - thirdparty/freeradius-server.git/commit
Don't drop capabilities too early
authorNick Porter <nick@portercomputing.co.uk>
Wed, 17 Sep 2025 13:44:40 +0000 (14:44 +0100)
committerNick Porter <nick@portercomputing.co.uk>
Wed, 17 Sep 2025 13:44:40 +0000 (14:44 +0100)
commit8a19159a192a970bbfdfd6a0aaa6e5c35fc6ce52
tree6a678c6143d57a4705648cbbb19ec8f850a9672e
parent40f184b3fae2a566eff57b44fddce273bcac4011
Don't drop capabilities too early

Dropping CAP_SETGID too early can cause setresuid() to fail on some
platforms.

Seen when running `freeradius -XC` on Debian platforms.
src/lib/server/main_config.c
src/lib/server/util.c