drop privileges prior to writing logs

Author: mdkent

chef-server/bin/chef-indexer

@@ -64,6 +64,8 @@ end
 Chef::Config.from_file(config[:config_file])
 Chef::Config.configure { |c| c.merge!(config) }
 
+Chef::Daemon.change_privilege
+
 if Chef::Config[:daemonize]
   unless Chef::Config[:log_location].is_a? IO
     Chef::Log.init(Chef::Config[:log_location])

chef/bin/chef-client

@@ -79,6 +79,8 @@ end
 Chef::Config.from_file(config[:config_file])
 Chef::Config.configure { |c| c.merge!(config) }
 
+Chef::Daemon.change_privilege
+
 if Chef::Config[:daemonize]
   unless Chef::Config[:log_location].is_a? IO
     Chef::Log.init(Chef::Config[:log_location])

chef/lib/chef/daemon.rb

@@ -40,7 +40,6 @@ def daemonize(name)
             exit if fork
             Process.setsid
             exit if fork
-            change_privilege
             Chef::Log.info("Forked, in #{Process.pid}. Priveleges: #{Process.euid} #{Process.egid}")
             File.umask 0000
             $stdin.reopen("/dev/null")