Drop setgid privs early, via OpenBSD

Reported in PR 5970 by Joseph Myers <jsm@octomino.demon.co.uk>

diff --git a/caesar/caesar.c b/caesar/caesar.c
index b9c71efc0cd3eb169d93072ef877437d082c1ea1..3359a067c3943d05384f1261624dc1a65a9b6cd8 100644 (file)
--- a/caesar/caesar.c
+++ b/caesar/caesar.c
@@ -1,4 +1,4 @@
-/*     $NetBSD: caesar.c,v 1.7 1998/09/13 15:27:27 hubertf Exp $       */
+/*     $NetBSD: caesar.c,v 1.8 1999/07/21 04:04:21 hubertf Exp $       */
 
 /*
  * Copyright (c) 1989, 1993
@@ -51,7 +51,7 @@ __COPYRIGHT("@(#) Copyright (c) 1989, 1993\n\
 #if 0
 static char sccsid[] = "@(#)caesar.c   8.1 (Berkeley) 5/31/93";
 #else
-__RCSID("$NetBSD: caesar.c,v 1.7 1998/09/13 15:27:27 hubertf Exp $");
+__RCSID("$NetBSD: caesar.c,v 1.8 1999/07/21 04:04:21 hubertf Exp $");
 #endif
 #endif /* not lint */
 
@@ -92,6 +92,9 @@ main(argc, argv)
        char *inbuf;
        int obs[26], try, winner;
 
+       /* revoke setgid privileges */
+       setregid(getgid(), getgid());
+
        winnerdot = 0;
        if (argc > 1)
                printit(argv[1]);