now set uid to that of SUDOERS_OWNER while parsing sudoers file

diff --git a/parse.c b/parse.c
index d35e9460eb502e9b09a3785d3f4cdacea3222879..6a9a03ff31deedf453ecd3e2055bfb844ab23074 100644 (file)
--- a/parse.c
+++ b/parse.c
@@ -85,8 +85,8 @@ int validate()
     FILE *sudoers_fp;
     int i, return_code;
 
-    /* become root */
-    set_perms(PERM_ROOT);
+    /* become sudoers file owner */
+    set_perms(PERM_SUDOERS);
 
     if ((sudoers_fp = fopen(_PATH_SUDO_SUDOERS, "r")) == NULL) {
        perror(_PATH_SUDO_SUDOERS);
@@ -103,7 +103,8 @@ int validate()
      */
     (void) fclose(sudoers_fp);
 
-    /* relinquish root */
+    /* relinquish extra privs */
+    set_perms(PERM_ROOT);
     set_perms(PERM_USER);
 
     if (return_code || parse_error)