suid down after fchown. Fixes #1914

diff --git a/src/main/mainconfig.c b/src/main/mainconfig.c
index 7922ffd565c450325d2aa55ab46dbb31c207a284..4da9ba025646387ea35fcaf2139edfe001da2d6b 100644 (file)
--- a/src/main/mainconfig.c
+++ b/src/main/mainconfig.c
@@ -590,15 +590,6 @@ static int switch_users(CONF_SECTION *cs)
                talloc_free(my_dir);
        }
 
-       /*
-        *      Once we're done with all of the privileged work,
-        *      permanently change the UID.
-        */
-       if (do_suid) {
-               rad_suid_set_down_uid(server_uid);
-               rad_suid_down();
-       }
-
        /*
         *      If we don't already have a log file open, open one
         *      now.  We may not have been logging anything yet.  The
@@ -632,6 +623,15 @@ static int switch_users(CONF_SECTION *cs)
                }
        }
 
+       /*
+        *      Once we're done with all of the privileged work,
+        *      permanently change the UID.
+        */
+       if (do_suid) {
+               rad_suid_set_down_uid(server_uid);
+               rad_suid_down();
+       }
+
        /*
         *      This also clears the dumpable flag if core dumps
         *      aren't allowed.