From 5ab3447de18235de566eb5116c0aec24050f5f85 Mon Sep 17 00:00:00 2001 From: "Ondrej Zajicek (work)" Date: Wed, 21 Aug 2019 17:30:00 +0200 Subject: Sysdep: Drop supplementary groups when dropping GID We forgot to do that. Oops. --- sysdep/unix/main.c | 3 +++ 1 file changed, 3 insertions(+) diff --git a/sysdep/unix/main.c b/sysdep/unix/main.c index 05becbe7..db848033 100644 --- a/sysdep/unix/main.c +++ b/sysdep/unix/main.c @@ -83,6 +83,9 @@ drop_gid(gid_t gid) { if (setgid(gid) < 0) die("setgid: %m"); + + if (setgroups(0, NULL) < 0) + die("setgroups: %m"); } /* -- cgit v1.2.3