nfqws,tpws: sec_harden after daemonize

This commit is contained in:
bol-van 2025-05-10 16:57:04 +03:00
parent 24b93cca7e
commit c1046a20db
2 changed files with 4 additions and 2 deletions

View File

@ -297,7 +297,6 @@ static int nfq_main(void)
return 1; return 1;
} }
sec_harden();
if (params.droproot && !droproot(params.uid, params.gid, params.gid_count) || !dropcaps()) if (params.droproot && !droproot(params.uid, params.gid, params.gid_count) || !dropcaps())
goto err; goto err;
print_id(); print_id();
@ -309,6 +308,8 @@ static int nfq_main(void)
if (params.daemon) daemonize(); if (params.daemon) daemonize();
sec_harden();
if (Fpid) if (Fpid)
{ {
if (fprintf(Fpid, "%d", getpid())<=0) if (fprintf(Fpid, "%d", getpid())<=0)

View File

@ -2135,7 +2135,6 @@ int main(int argc, char *argv[])
} }
set_ulimit(); set_ulimit();
sec_harden();
if (params.droproot && !droproot(params.uid,params.gid,params.gid_count)) if (params.droproot && !droproot(params.uid,params.gid,params.gid_count))
goto exiterr; goto exiterr;
#ifdef __linux__ #ifdef __linux__
@ -2148,6 +2147,8 @@ int main(int argc, char *argv[])
if (params.daemon) daemonize(); if (params.daemon) daemonize();
sec_harden();
if (Fpid) if (Fpid)
{ {
if (fprintf(Fpid, "%d", getpid())<=0) if (fprintf(Fpid, "%d", getpid())<=0)