Patch origin: in-house
Patch status: Solaris-specific; not suitable for upstream

Drops extra privilege which was given via SMF manifest file.

--- server/main.c
+++ server/main.c
@@ -45,6 +45,8 @@
 #include <unistd.h>
 #endif
 
+#include <priv.h>
+
 /* WARNING: Win32 binds http_main.c dynamically to the server. Please place
  *          extern functions and global data in another appropriate module.
  *
@@ -452,6 +454,7 @@
     apr_status_t rv;
     module **mod;
     const char *opt_arg;
+    priv_set_t *tset;
     APR_OPTIONAL_FN_TYPE(ap_signal_server) *signal_server;
 
     AP_MONCONTROL(0); /* turn off profiling of startup */
@@ -788,6 +806,17 @@
 
         ap_run_optional_fn_retrieve();
 
+
+        /* here we drop privileges we won't need any more */
+        tset = priv_allocset();
+        priv_emptyset(tset);
+        priv_addset(tset, PRIV_NET_PRIVADDR);
+        if (setppriv(PRIV_OFF, PRIV_PERMITTED, tset) != 0) {
+           ap_log_error(APLOG_MARK, APLOG_EMERG, 0, NULL,
+                         APLOGNO(00021) "Unable to drop unneeded privilege.");
+            destroy_and_exit_process(process, 1);
+        }
+
         ap_main_state = AP_SQ_MS_RUN_MPM;
         if (ap_run_mpm(pconf, plog, ap_server_conf) != OK)
             break;