drop privs better

This commit is contained in:
Florent Daigniere
2022-12-23 10:58:06 +01:00
parent 8d2bd6d9ff
commit 108958cabb
6 changed files with 18 additions and 21 deletions

View File

@@ -2,15 +2,12 @@
import os
import logging as log
from pwd import getpwnam
import sys
from socrate import system
os.system("chown mailu:mailu -R /dkim")
os.system("find /data | grep -v /fetchmail | xargs -n1 chown mailu:mailu")
mailu_id = getpwnam('mailu')
os.setgid(mailu_id.pw_gid)
os.setuid(mailu_id.pw_uid)
system.drop_privs_to('mailu')
log.basicConfig(stream=sys.stderr, level=os.environ.get("LOG_LEVEL", "INFO"))
system.set_env(['SECRET'])