nfqws,tpws: sec_harden after daemonize

3 months ago · c1046a20db
2 changed files with 4 additions and 2 deletions
--- a/nfq/nfqws.c
+++ b/nfq/nfqws.c
@ -297,7 +297,6 @@ static int nfq_main(void)
 		return 1;
 	}

-	sec_harden();
 	if (params.droproot && !droproot(params.uid, params.gid, params.gid_count) || !dropcaps())
 		goto err;
 	print_id();
@ -309,6 +308,8 @@ static int nfq_main(void)

 	if (params.daemon) daemonize();

+	sec_harden();
+
 	if (Fpid)
 	{
 		if (fprintf(Fpid, "%d", getpid())<=0)
--- a/tpws/tpws.c
+++ b/tpws/tpws.c
@ -2135,7 +2135,6 @@ int main(int argc, char *argv[])
 	}

 	set_ulimit();
-	sec_harden();
 	if (params.droproot && !droproot(params.uid,params.gid,params.gid_count))
 		goto exiterr;
 #ifdef __linux__
@ -2148,6 +2147,8 @@ int main(int argc, char *argv[])

 	if (params.daemon) daemonize();

+	sec_harden();
+
 	if (Fpid)
 	{
 		if (fprintf(Fpid, "%d", getpid())<=0)