1 files changed, 4 insertions, 3 deletions

diff --git a/src/firejail/sbox.c b/src/firejail/sbox.c
index 933c93b0d..f9c41f661 100644
--- a/src/firejail/sbox.c
+++ b/src/firejail/sbox.c
@@ -203,15 +203,16 @@ static int __attribute__((noreturn)) sbox_do_exec_v(unsigned filtermask, char *
                 }
         }
 
-        if (filtermask & SBOX_ROOT) {
+        if (filtermask & SBOX_USER)
+                drop_privs(1);
+        else if (filtermask & SBOX_ROOT) {
                 // elevate privileges in order to get grsecurity working
                 if (setreuid(0, 0))
                         errExit("setreuid");
                 if (setregid(0, 0))
                         errExit("setregid");
         }
-        else if (filtermask & SBOX_USER)
-                drop_privs(1);
+        else assert(0);
 
         if (arg[0]) { // get rid of scan-build warning
                 int fd = open(arg[0], O_PATH | O_CLOEXEC);