From: Florian Westphal <fw@strlen.de>
Date: Mon, 26 Aug 2013 22:19:31 +0000 (+0200)
Subject: ngircd: discard supplementary group ids on startup
X-Git-Tag: rel-21-rc1~31
X-Git-Url: https://arthur.barton.de/cgi-bin/gitweb.cgi?p=ngircd-alex.git;a=commitdiff_plain;h=e009ccbe66f67a4c5344d6a1f415c50b699765ad

ngircd: discard supplementary group ids on startup

The intention was to switch to JUST uid:gid, but setgid is not
sufficient.

Reported-by:  Michael Scherer <misc@zarb.org>
---

diff --git a/src/ngircd/ngircd.c b/src/ngircd/ngircd.c
index e075e0a7..4099719b 100644
--- a/src/ngircd/ngircd.c
+++ b/src/ngircd/ngircd.c
@@ -724,6 +724,11 @@ NGIRCd_Init(bool NGIRCd_NoDaemon)
 			if (real_errno != EPERM) 
 				goto out;
 		}
+		if (setgroups(0, NULL) != 0) {
+			Log(LOG_ERR, "Can't drop supplementary group ids: %s!",
+					strerror(errno));
+			goto out;
+		}
 	}
 #endif