capng: Drop supplemental groups when switching to daemon user
authorSteve Grubb <sgrubb@redhat.com>
Mon, 1 Aug 2011 18:28:27 +0000 (14:28 -0400)
committerColin Walters <walters@verbum.org>
Mon, 1 Aug 2011 18:28:27 +0000 (14:28 -0400)
commit03ab0104abd18f1d137eac9a02a18fafeacd736c
tree73131d0f1cef92fba6281e608b3604bc5d2850f3
parent4b78d66da86801acdb5044a82dce5f1422f06cd3
capng: Drop supplemental groups when switching to daemon user

This patch ensures the daemon process doesn't inherit any supplemental
groups for the root user from an administrator login via an init
script.

This is only an issue for pre-systemd systems.

https://bugzilla.redhat.com/show_bug.cgi?id=726953
bus/selinux.c