attach: always drop supplementary groups

Closes #1704. Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

attach: always drop supplementary groups
24927339 · Christian Brauner · 5eda487c · 24927339
Unverified Commit 24927339 authored Apr 09, 2018 by Christian Brauner
Show whitespace changes
Inline Side-by-side

Showing with 1 addition and 1 deletion

attach.c src/lxc/attach.c +1 -1

No files found.
--- a/src/lxc/attach.c
+++ b/src/lxc/attach.c
@@ -870,11 +870,11 @@ static int attach_child_main(struct attach_clone_payload *payload)
 		ret = lxc_switch_uid_gid(new_uid, new_gid);
 		if (ret < 0)
 			goto on_error;
+	}
 	ret = lxc_setgroups(0, NULL);
 	if (ret < 0)
 		goto on_error;
-	}
 	if ((init_ctx->container && init_ctx->container->lxc_conf &&
 	     init_ctx->container->lxc_conf->no_new_privs) ||