grp = getgrgid(Conf_GID);
Log(LOG_ERR, "Can't change group ID to %s(%u): %s!",
grp ? grp->gr_name : "?", Conf_GID,
- strerror(errno));
+ strerror(real_errno));
if (real_errno != EPERM)
goto out;
}
+ if (setgroups(0, NULL) != 0) {
+ real_errno = errno;
+ Log(LOG_ERR, "Can't drop supplementary group IDs: %s!",
+ strerror(errno));
+ if (real_errno != EPERM)
+ goto out;
+ }
}
#endif
pwd = getpwuid(Conf_UID);
Log(LOG_ERR, "Can't change user ID to %s(%u): %s!",
pwd ? pwd->pw_name : "?", Conf_UID,
- strerror(errno));
+ strerror(real_errno));
if (real_errno != EPERM)
goto out;
}