2 files changed, 11 insertions, 1 deletions

diff --git a/src/firejail/network_main.c b/src/firejail/network_main.c
index e30d07229..1a40e8a0f 100644
--- a/src/firejail/network_main.c
+++ b/src/firejail/network_main.c
@@ -283,6 +283,16 @@ void net_dns_print(pid_t pid) {
                 free(comm);
         }
 
+        // check privileges for non-root users
+        uid_t uid = getuid();
+        if (uid != 0) {
+                uid_t sandbox_uid = pid_get_uid(pid);
+                if (uid != sandbox_uid) {
+                        fprintf(stderr, "Error: permission denied.\n");
+                        exit(1);
+                }
+        }
+
         EUID_ROOT();
         if (join_namespace(pid, "mnt"))
                 exit(1);
diff --git a/src/lib/pid.c b/src/lib/pid.c
index b73a57409..75576c787 100644
--- a/src/lib/pid.c
+++ b/src/lib/pid.c
@@ -149,7 +149,7 @@ uid_t pid_get_uid(pid_t pid) {
         char buf[PIDS_BUFLEN];
         while (fgets(buf, PIDS_BUFLEN - 1, fp)) {
                 if (strncmp(buf, "Uid:", 4) == 0) {
-                        char *ptr = buf + 5;
+                        char *ptr = buf + 4;
                         while (*ptr != '\0' && (*ptr == ' ' || *ptr == '\t')) {
                                 ptr++;
                         }