1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24

use libc::{c_int, c_void, gid_t, setgid, setuid, uid_t};

pub fn switch_user(uid: Option<uid_t>, gid: Option<gid_t>) {
    match gid {
        Some(gid) => {
            if unsafe { setgid(gid) } != 0 {
                panic!("setgid()");
            }
        }
        None => (),
    }
    match uid {
        Some(uid) => {
            extern "C" {
                fn setgroups(ngroups: c_int, ptr: *const c_void) -> c_int;
            }
            let _ = unsafe { setgroups(0, 0 as *const c_void) };
            if unsafe { setuid(uid) } != 0 {
                panic!("setuid()");
            }
        }
        None => (),
    }
}