From 568b12600b22a680c29d4a81776a2d242066f031 Mon Sep 17 00:00:00 2001
From: "J. King" <jking@jkingweb.ca>
Date: Tue, 18 May 2021 09:46:42 -0400
Subject: [PATCH] Drop privileges when executing CLI

---
 dist/arch/arsse.sh | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/dist/arch/arsse.sh b/dist/arch/arsse.sh
index c065c29..e34ffd8 100644
--- a/dist/arch/arsse.sh
+++ b/dist/arch/arsse.sh
@@ -1,3 +1,10 @@
 #! /usr/bin/php
 <?php
+if (posix_geteuid() == 0) {
+    $info = posix_getpwnam("arsse");
+    if ($info) { 
+        posix_setgid($info['gid']);
+        posix_setuid($info['uid']);
+    }
+}
 require "/usr/share/webapps/arsse/arsse.php";