setgid and chdir before setuid

2025-10-14 21:43:01 +00:00 · 2014-09-20 18:31:27 -07:00
parent 0a2ddb7994
commit 45e1822a2e
1 changed files with 7 additions and 5 deletions
--- a/jupyterhub/spawner.py
+++ b/jupyterhub/spawner.py
@@ -129,14 +129,16 @@ def set_user_setuid(username):
    home = user.pw_dir
    
    def preexec():
-        # don't forward signals
-        os.setpgrp()
-        # set the user and group
-        os.setuid(uid)
-        os.setgid(gid)
        # start in the user's home dir
        os.chdir(home)
        
+        # don't forward signals
+        os.setpgrp()
+        
+        # set the user and group
+        os.setgid(gid)
+        os.setuid(uid)
+    
    return preexec