diff --git a/godrop.go b/godrop.go index 292c276..0b9aa5b 100644 --- a/godrop.go +++ b/godrop.go @@ -73,6 +73,9 @@ func MultiDrop(c Config, f func() ([]net.Listener, error)) error { if err != nil { return errf(err) } + if uid == 0 { + return errf(errors.New("unable to drop privileges to uid 0 (root)")) + } gid, err := GID(c.Group) if err != nil { return errf(err)