bhyve/slirp: Drop privileges before entering capability mode

When in restricted mode, the slirp-helper process enters a capsicum
sandbox, after which we cannot look up the uid for the "nobody" user.
Reverse the order.

Reported by:	kp
Fixes:	0e62ebd20172 ("bhyve: Move the slirp backend out into a separate process")

1 files changed, 5 insertions, 5 deletions

diff --git a/usr.sbin/bhyve/slirp/slirp-helper.c b/usr.sbin/bhyve/slirp/slirp-helper.c
index ee62dd212369..06f393aab724 100644
--- a/usr.sbin/bhyve/slirp/slirp-helper.c
+++ b/usr.sbin/bhyve/slirp/slirp-helper.c
@@ -548,6 +548,11 @@ main(int argc, char **argv)
 	priv.slirp = slirp;
 
 	/*
+	 * Drop root privileges if we have them.
+	 */
+	drop_privs();
+
+	/*
 	 * In restricted mode, we can enter a Capsicum sandbox without losing
 	 * functionality.
 	 */
@@ -555,11 +560,6 @@ main(int argc, char **argv)
 		err(1, "caph_enter");
 
 	/*
-	 * Drop root privileges if we have them.
-	 */
-	drop_privs();
-
-	/*
 	 * Enter our main loop.  If bhyve goes away, we should observe a hangup
 	 * on the socket and exit.
 	 */