check privileges for dns.print

1 files changed, 10 insertions, 0 deletions

diff --git a/src/firejail/network_main.c b/src/firejail/network_main.c
index e30d07229..1a40e8a0f 100644
--- a/src/firejail/network_main.c
+++ b/src/firejail/network_main.c
@@ -283,6 +283,16 @@ void net_dns_print(pid_t pid) {
                 free(comm);
         }
 
+        // check privileges for non-root users
+        uid_t uid = getuid();
+        if (uid != 0) {
+                uid_t sandbox_uid = pid_get_uid(pid);
+                if (uid != sandbox_uid) {
+                        fprintf(stderr, "Error: permission denied.\n");
+                        exit(1);
+                }
+        }
+
         EUID_ROOT();
         if (join_namespace(pid, "mnt"))
                 exit(1);