Add in initgroups call to drop root's groups.

svn:r17279

diff --git a/contrib/linux-tor-prio.sh b/contrib/linux-tor-prio.sh
index d03b470ca1e1bdd79c5b7d20cbe600d8c9029bb8..ea9e0ddaa5df76a31ddd2b1e98f0e20d63dcc049 100644 (file)
--- a/contrib/linux-tor-prio.sh
+++ b/contrib/linux-tor-prio.sh
@@ -23,6 +23,7 @@
 #
 # #include <unistd.h>
 # int main(int argc, char **argv) {
+# if(initgroups("tor", GID) == -1) { perror("initgroups"); return 1; }
 # if(setresgid(GID, GID, GID) == -1) { perror("setresgid"); return 1; }
 # if(setresuid(UID, UID, UID) == -1) { perror("setresuid"); return 1; }
 # execl("/bin/tor", "/bin/tor", "-f", "/etc/tor/torrc", NULL);