From 19561a1dfd111b7b2dd941ac2ca0d46ee5ce16f6 Mon Sep 17 00:00:00 2001 From: "Jason A. Donenfeld" Date: Tue, 4 Jun 2019 15:56:15 +0200 Subject: tunnel: retain SeLoadDriverPrivilege This is a big loss. We'll need to revisit this. Signed-off-by: Jason A. Donenfeld --- tunnel/service.go | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'tunnel/service.go') diff --git a/tunnel/service.go b/tunnel/service.go index 70e2c8a1..dbf0dd6e 100644 --- a/tunnel/service.go +++ b/tunnel/service.go @@ -155,8 +155,8 @@ func (service *Service) Execute(args []string, r <-chan svc.ChangeRequest, chang return } - log.Println("Dropping all privileges") - err = services.DropAllPrivileges() + log.Println("Dropping privileges") + err = services.DropAllPrivileges(true) if err != nil { serviceError = services.ErrorDropPrivileges return -- cgit v1.2.3-59-g8ed1b