From b9a87cd78587d606a250415e3681d5e306f98db9 Mon Sep 17 00:00:00 2001
From: Chris Simons <35010457+simons-public@users.noreply.github.com>
Date: Wed, 24 Aug 2022 17:22:07 -0700
Subject: set gid along with uid (#152)

---
 backend/plugin.py | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

(limited to 'backend')

diff --git a/backend/plugin.py b/backend/plugin.py
index f55e398c..04ba285d 100644
--- a/backend/plugin.py
+++ b/backend/plugin.py
@@ -5,7 +5,7 @@ from asyncio import (Lock, get_event_loop, new_event_loop,
 from concurrent.futures import ProcessPoolExecutor
 from importlib.util import module_from_spec, spec_from_file_location
 from json import dumps, load, loads
-from os import path, setuid
+from os import path, setgid, setuid
 from signal import SIGINT, signal
 from sys import exit
 from time import time
@@ -49,6 +49,7 @@ class PluginWrapper:
         set_event_loop(new_event_loop())
         if self.passive:
             return
+        setgid(0 if "root" in self.flags else 1000)
         setuid(0 if "root" in self.flags else 1000)
         spec = spec_from_file_location("_", self.file)
         module = module_from_spec(spec)
-- 
cgit v1.2.3