lib-program-client: Try drop setuid root by default

But not if root privileges are asked for.

diff --git a/src/lib-program-client/program-client-local.c b/src/lib-program-client/program-client-local.c
index c5037139d9326b04e0b0c8e69b399f8f909d13eb..bfb7433714a3633467a86e2291427199c96d9c25 100644 (file)
--- a/src/lib-program-client/program-client-local.c
+++ b/src/lib-program-client/program-client-local.c
@@ -244,6 +244,11 @@ int program_client_local_connect(struct program_client *pclient)
                        }
                }
 
+               /* if we want to allow root, then we will not drop
+                  root privileges */
+               pclient->set.restrict_set.drop_setuid_root =
+                       !pclient->set.allow_root;
+
                restrict_access(&pclient->set.restrict_set, pclient->set.home,
                                !pclient->set.allow_root);