From 0def0c9fa34376aba2cdcf72be5bc61771b06428 Mon Sep 17 00:00:00 2001 From: Igor Ryzhov Date: Tue, 18 May 2021 17:07:06 +0300 Subject: [PATCH] bgpd: raise privs for SO_BINDTODEVICE The priv raise was incorrectly dropped in 97896a9. Signed-off-by: Igor Ryzhov --- bgpd/bgp_network.c | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/bgpd/bgp_network.c b/bgpd/bgp_network.c index f3857162c3..860c5fd382 100644 --- a/bgpd/bgp_network.c +++ b/bgpd/bgp_network.c @@ -572,7 +572,9 @@ static int bgp_accept(struct thread *thread) peer->doppelganger = peer1; peer1->doppelganger = peer; peer->fd = bgp_sock; - vrf_bind(peer->bgp->vrf_id, bgp_sock, bgp_get_bound_name(peer)); + frr_with_privs(&bgpd_privs) { + vrf_bind(peer->bgp->vrf_id, bgp_sock, bgp_get_bound_name(peer)); + } bgp_peer_reg_with_nht(peer); bgp_fsm_change_status(peer, Active); BGP_TIMER_OFF(peer->t_start); /* created in peer_create() */ -- 2.39.5