datasets: initialize after dropping privileges

Move initialization of datasets to a point after privileges have been dropped. Ticket 4239
vincentmli · Dec 13, 2021 · 92eb14c · 92eb14c
1 parent d67f8f9
commit 92eb14c
Showing 1 changed file with 1 addition and 2 deletions.
diff --git a/src/suricata.c b/src/suricata.c
@@ -2000,8 +2000,6 @@ static int InitSignalHandler(SCInstance *suri)
  * Will be run once per pcap in unix-socket mode */
 void PreRunInit(const int runmode)
 {
-    /* Initialize Datasets to be able to use them with unix socket */
-    DatasetsInit();
     HttpRangeContainersInit();
     if (runmode == RUNMODE_UNIX_SOCKET)
         return;
@@ -2029,6 +2027,7 @@ void PreRunPostPrivsDropInit(const int runmode)
 {
     StatsSetupPostConfigPreOutput();
     RunModeInitializeOutputs();
+    DatasetsInit();
 
     if (runmode == RUNMODE_UNIX_SOCKET) {
         /* As the above did some necessary startup initialization, it