diff -up ecryptfs-utils-108/src/pam_ecryptfs/pam_ecryptfs.c.fixexecgid ecryptfs-utils-108/src/pam_ecryptfs/pam_ecryptfs.c
--- ecryptfs-utils-108/src/pam_ecryptfs/pam_ecryptfs.c.fixexecgid 2015-08-11 14:43:59.298822826 +0200
+++ ecryptfs-utils-108/src/pam_ecryptfs/pam_ecryptfs.c 2015-08-11 14:43:59.299822823 +0200
@@ -365,8 +365,10 @@ static int private_dir(pam_handle_t *pam
_exit(0);
}
clearenv();
- if (setgroups(1, &pwd->pw_gid) < 0 || setgid(pwd->pw_gid) < 0)
+ if (initgroups(pwd->pw_name, pwd->pw_gid) != 0) {
+ syslog(LOG_ERR, "Unable to set user's groups : %m");
_exit(-1);
+ }
/* run mount.ecryptfs_private as the user */
if (setresuid(pwd->pw_uid, pwd->pw_uid, pwd->pw_uid) < 0)
_exit(-1);
@@ -380,8 +382,10 @@ static int private_dir(pam_handle_t *pam
_exit(0);
}
clearenv();
- if (setgroups(1, &pwd->pw_gid) < 0 || setgid(pwd->pw_gid) < 0)
+ if (initgroups(pwd->pw_name, pwd->pw_gid) != 0) {
+ syslog(LOG_ERR, "Unable to set user's groups : %m");
_exit(-1);
+ }
/* run umount.ecryptfs_private as the user */
if (setresuid(pwd->pw_uid, pwd->pw_uid, pwd->pw_uid) < 0)
_exit(-1);