capng: Drop supplemental groups when switching to daemon user
authorSteve Grubb <sgrubb@redhat.com>
Mon, 1 Aug 2011 18:28:27 +0000 (14:28 -0400)
committerSimon McVittie <simon.mcvittie@collabora.co.uk>
Thu, 11 Aug 2011 09:54:45 +0000 (10:54 +0100)
commit70fb675a108dbf660d384150429c9af085b0c48e
treed656fcd5cc76d6c20629b8d1fadfe85b160f90ec
parent93731e6c9cda388e3b29e910081295be649a8c8d
capng: Drop supplemental groups when switching to daemon user

This patch ensures the daemon process doesn't inherit any supplemental
groups for the root user from an administrator login via an init
script.

This is only an issue for pre-systemd systems.

https://bugzilla.redhat.com/show_bug.cgi?id=726953
bus/selinux.c