fix(occ): Make it possible to run as root

Signed-off-by: Frank Karlitschek <[email protected]>
Signed-off-by: Christoph Wurst <[email protected]>
Signed-off-by: Ferdinand Thiessen <[email protected]>

Author: karlitschek

occ

@@ -1,11 +1,33 @@
 #!/usr/bin/env php
 <?php
+
+declare(strict_types=1);
+
+/**
+ * SPDX-FileCopyrightText: 2025 Nextcloud GmbH and Nextcloud contributors
+ * SPDX-License-Identifier: AGPL-3.0-or-later
+ */
+
 /**
- * SPDX-FileCopyrightText: 2014 ownCloud, Inc.
- * SPDX-FileCopyrightText: 2014 Olivier Paroz
- * SPDX-FileCopyrightText: 2013 Thomas Müller <[email protected]>
- * SPDX-License-Identifier: AGPL-3.0-only
+ * Drop privileges when run as root
  */
+function dropPrivileges(): void {
+	if (posix_getuid() !== 0) {
+		return;
+	}
+
+	$configPath = __DIR__ . '/config/config.php';
+	$uid = fileowner($configPath);
+	if ($uid === false) {
+		return;
+	}
+	$info = posix_getpwuid($uid);
+	if ($info === false) {
+		return;
+	}
+	posix_setuid($uid);
+	posix_setgid($info['gid']);
+}
 
-//$argv = $_SERVER['argv'];
+dropPrivileges();
 require_once __DIR__ . '/console.php';