1 files changed, 7 insertions, 1 deletions

diff --git a/src/firejail/sandbox.c b/src/firejail/sandbox.c
index e0cecda1b..e1959a453 100644
--- a/src/firejail/sandbox.c
+++ b/src/firejail/sandbox.c
@@ -669,7 +669,9 @@ int sandbox(void* sandbox_arg) {
                 // do nothing - there are problems with ibus version 1.5.11
         }
         else
+                EUID_USER();
                 env_ibus_load();
+                EUID_ROOT();
 
         //****************************
         // fs pre-processing:
@@ -925,6 +927,8 @@ int sandbox(void* sandbox_arg) {
         // set application environment
         //****************************
         prctl(PR_SET_PDEATHSIG, SIGKILL, 0, 0, 0); // kill the child in case the parent died
+
+        EUID_USER();
         int cwd = 0;
         if (cfg.cwd) {
                 if (chdir(cfg.cwd) == 0)
@@ -951,7 +955,7 @@ int sandbox(void* sandbox_arg) {
                 }
         }
 
-
+        EUID_ROOT();
         // set nice
         if (arg_nice) {
                 errno = 0;
@@ -980,7 +984,9 @@ int sandbox(void* sandbox_arg) {
         // set cpu affinity
         if (cfg.cpus) {
                 save_cpu(); // save cpu affinity mask to CPU_CFG file
+                EUID_USER();
                 set_cpu_affinity();
+                EUID_ROOT();
         }
 
         // save cgroup in CGROUP_CFG file