1 files changed, 6 insertions, 0 deletions

diff --git a/src/firejail/run_symlink.c b/src/firejail/run_symlink.c
index d57816e12..cc6f6b3e9 100644
--- a/src/firejail/run_symlink.c
+++ b/src/firejail/run_symlink.c
@@ -91,6 +91,12 @@ void run_symlink(int argc, char **argv) {
 
         printf("Redirecting symlink to %s\n", program);
 
+        // drop privileges
+        if (setgid(getgid()) < 0)
+                errExit("setgid/getgid");
+        if (setuid(getuid()) < 0)
+                errExit("setuid/getuid");
+
         // run command
         char *a[3 + argc];
         a[0] = firejail;