anvil, config, log, ssl-params: Drop privileges as configured.

--HG--
branch : HEAD

diff --git a/src/anvil/main.c b/src/anvil/main.c
index f6021b25c47d9327d5b79b6c258749747a1cb70d..8b81d0883f0d35ae4a7f7d759ef9d7aa8bcc8801 100644 (file)
--- a/src/anvil/main.c
+++ b/src/anvil/main.c
@@ -3,6 +3,7 @@
 #include "common.h"
 #include "array.h"
 #include "env-util.h"
+#include "restrict-access.h"
 #include "master-service.h"
 #include "master-interface.h"
 #include "connect-limit.h"
@@ -24,8 +25,11 @@ int main(int argc, char *argv[])
        master_service = master_service_init("anvil", 0, &argc, &argv, NULL);
        if (master_getopt(master_service) > 0)
                return FATAL_DEFAULT;
-
        master_service_init_log(master_service, "anvil: ");
+
+       restrict_access_by_env(NULL, FALSE);
+       restrict_access_allow_coredumps(TRUE);
+
        master_service_init_finish(master_service);
        connect_limit = connect_limit_init();
        penalty = penalty_init();

diff --git a/src/config/main.c b/src/config/main.c
index af86a103d3d55e4a48a7485e908940d6c3eb9d0e..56a17075cbae1db354ffe34e49ff4960dd26ae3b 100644 (file)
--- a/src/config/main.c
+++ b/src/config/main.c
@@ -3,6 +3,7 @@
 #include "lib.h"
 #include "array.h"
 #include "env-util.h"
+#include "restrict-access.h"
 #include "master-service.h"
 #include "config-connection.h"
 #include "config-parser.h"
@@ -20,8 +21,11 @@ int main(int argc, char *argv[])
        master_service = master_service_init("config", 0, &argc, &argv, NULL);
        if (master_getopt(master_service) > 0)
                return FATAL_DEFAULT;
-
        master_service_init_log(master_service, "config: ");
+
+       restrict_access_by_env(NULL, FALSE);
+       restrict_access_allow_coredumps(TRUE);
+
        master_service_init_finish(master_service);
        config_parse_load_modules();
 

diff --git a/src/log/main.c b/src/log/main.c
index 9aed0f0953a1d65109441f76e2d291562efe2dbe..af47e3e6ddc4f99320a85609a80595a2e34b5c1a 100644 (file)
--- a/src/log/main.c
+++ b/src/log/main.c
@@ -2,6 +2,7 @@
 
 #include "common.h"
 #include "lib-signals.h"
+#include "restrict-access.h"
 #include "master-interface.h"
 #include "master-service.h"
 #include "master-service-settings.h"
@@ -51,8 +52,11 @@ int main(int argc, char *argv[])
        if (master_service_settings_read_simple(master_service,
                                                NULL, &error) < 0)
                i_fatal("Error reading configuration: %s", error);
-
        master_service_init_log(master_service, "log: ");
+
+       restrict_access_by_env(NULL, FALSE);
+       restrict_access_allow_coredumps(TRUE);
+
        master_service_init_finish(master_service);
 
        /* logging should never die if there are some clients */

diff --git a/src/ssl-params/main.c b/src/ssl-params/main.c
index ffa8bdd56868d4daa42ab0c4f9347436d8a48abb..37b3abeb2020cd8da77504830ca7c433efcf52a4 100644 (file)
--- a/src/ssl-params/main.c
+++ b/src/ssl-params/main.c
@@ -4,6 +4,7 @@
 #include "lib-signals.h"
 #include "array.h"
 #include "ostream.h"
+#include "restrict-access.h"
 #include "master-service.h"
 #include "ssl-params-settings.h"
 #include "ssl-params.h"
@@ -122,8 +123,11 @@ int main(int argc, char *argv[])
 
        if (master_getopt(master_service) > 0)
                return FATAL_DEFAULT;
-
        set = ssl_params_settings_read(master_service);
+
+       restrict_access_by_env(NULL, FALSE);
+       restrict_access_allow_coredumps(TRUE);
+
        master_service_init_finish(master_service);
 
 #ifndef HAVE_SSL