attach: always drop supplementary groups

Closes lxc#1704. Signed-off-by: Christian Brauner <[email protected]>
vpsfreecz · Apr 9, 2018 · 2492733 · 2492733
1 parent 5eda487
commit 2492733
Showing 1 changed file with 4 additions and 4 deletions.
diff --git a/src/lxc/attach.c b/src/lxc/attach.c
@@ -870,12 +870,12 @@ static int attach_child_main(struct attach_clone_payload *payload)
 		ret = lxc_switch_uid_gid(new_uid, new_gid);
 		if (ret < 0)
 			goto on_error;
-
-		ret = lxc_setgroups(0, NULL);
-		if (ret < 0)
-			goto on_error;
 	}
 
+	ret = lxc_setgroups(0, NULL);
+	if (ret < 0)
+		goto on_error;
+
 	if ((init_ctx->container && init_ctx->container->lxc_conf &&
 	     init_ctx->container->lxc_conf->no_new_privs) ||
 	    (options->attach_flags & LXC_ATTACH_NO_NEW_PRIVS)) {