From 9edb82825145b2311c547003b9e7ca286ef7db3a Mon Sep 17 00:00:00 2001
From: Omar Polo <op@omarpolo.com>
Date: Wed, 3 Feb 2021 14:13:32 +0000
Subject: [PATCH] drop privileges after the fork

---
 gmid.c | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/gmid.c b/gmid.c
index b52c5d5..b8467f4 100644
--- a/gmid.c
+++ b/gmid.c
@@ -568,7 +568,6 @@ main(int argc, char **argv)
 	/* setup tls before dropping privileges: we don't want user
 	 * to put private certs inside the chroot. */
 	setup_tls();
-	drop_priv();
 
 	signal(SIGPIPE, SIG_IGN);
 	signal(SIGCHLD, SIG_IGN);
@@ -595,11 +594,13 @@ main(int argc, char **argv)
 	case 0:			/* child */
 		close(p[0]);
 		exfd = p[1];
+		drop_priv();
 		listener_main();
 		_exit(0);
 
 	default:		/* parent */
 		close(p[1]);
+		drop_priv();
 		return executor_main(p[0]);
 	}
 }