capabilities: initialize supplementary groups only when doing a setuid()

This commit is contained in:
Martin Willi 2013-05-08 14:58:28 +02:00
parent 2e9201f4ef
commit b1bd63547b

View File

@ -225,7 +225,7 @@ METHOD(capabilities_t, drop, bool,
prctl(PR_SET_KEEPCAPS, 1, 0, 0, 0); prctl(PR_SET_KEEPCAPS, 1, 0, 0, 0);
#endif #endif
if (!init_supplementary_groups(this)) if (this->uid && !init_supplementary_groups(this))
{ {
DBG1(DBG_LIB, "initializing supplementary groups for %u failed", DBG1(DBG_LIB, "initializing supplementary groups for %u failed",
this->uid); this->uid);