Check for UID/EUID 0 if running process checks.

craighrowland · craighrowland · commit 89619eae7fe2 · 2022-06-30T15:50:38.000+12:00
Requires root to read all of /proc.
diff --git a/sandfly-entropyscan.go b/sandfly-entropyscan.go
@@ -109,6 +109,9 @@ func main() {
 	}
 
 	if procOnly {
+		if os.Geteuid() != 0 {
+			log.Fatalf("process checking option requires UID/EUID 0 (root) to run")
+		}
 		// This will do a PID bust of all PID range to help detect hidden PIDs.
 		pidPaths, err := genPIDExePaths()
 		if err != nil {

Original file line number	Diff line number	Diff line change
`@@ -109,6 +109,9 @@ func main() {`
`109`	`109`	`}`
`110`	`110`
`111`	`111`	`if procOnly {`
	`112`	`+ if os.Geteuid() != 0 {`
	`113`	`+ log.Fatalf("process checking option requires UID/EUID 0 (root) to run")`
	`114`	`+ }`
`112`	`115`	`// This will do a PID bust of all PID range to help detect hidden PIDs.`
`113`	`116`	`pidPaths, err := genPIDExePaths()`
`114`	`117`	`if err != nil {`