diff --git a/parse.c b/parse.c index d35e9460e..6a9a03ff3 100644 --- a/parse.c +++ b/parse.c @@ -85,8 +85,8 @@ int validate() FILE *sudoers_fp; int i, return_code; - /* become root */ - set_perms(PERM_ROOT); + /* become sudoers file owner */ + set_perms(PERM_SUDOERS); if ((sudoers_fp = fopen(_PATH_SUDO_SUDOERS, "r")) == NULL) { perror(_PATH_SUDO_SUDOERS); @@ -103,7 +103,8 @@ int validate() */ (void) fclose(sudoers_fp); - /* relinquish root */ + /* relinquish extra privs */ + set_perms(PERM_ROOT); set_perms(PERM_USER); if (return_code || parse_error)