Bugfix: Unset aux groups when dropping the privileges

adnanh · Apr 13, 2024 · 8ee2601 · 8ee2601
1 parent 0fa8bbf
commit 8ee2601
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/droppriv_unix.go b/droppriv_unix.go
@@ -7,7 +7,12 @@ import (
 )
 
 func dropPrivileges(uid, gid int) error {
-	err := syscall.Setgid(gid)
+	err := syscall.Setgroups([]int{})
+	if err != nil {
+		return err
+	}
+
+	err = syscall.Setgid(gid)
 	if err != nil {
 		return err
 	}