add uid check and drop privileges if needed

phue · Jun 17, 2024 · 0af7900 · 0af7900
1 parent 969613b
commit 0af7900
Showing 1 changed file with 7 additions and 2 deletions.
diff --git a/nextflowspawner/__init__.py b/nextflowspawner/__init__.py
@@ -34,8 +34,13 @@ def _default_schema(self):
         except FileNotFoundError:
             print(f"{self.workflow_url} does not seem to provide a nextflow_schema.json")
 
-    def make_preexec_fn(self, _):
-        pass
+    def make_preexec_fn(self, name):
+        if os.getuid():
+            # if we are already running as non-root user, do nothing
+            pass
+        else:
+            # otherwise drop privileges
+            return super().set_user_setuid(name, chdir=True)
 
     def _get_params_from_schema(self, schema, key=None):
         params = {}