Blob Blame History Raw
diff --git src/lsm_daemon.c src/lsm_daemon.c
index 6bc7a70..670fb17 100644
--- src/lsm_daemon.c
+++ src/lsm_daemon.c
@@ -41,6 +41,7 @@
 #include <sys/time.h>
 #include <libgen.h>
 #include <assert.h>
+#include <grp.h>
 
 #define BASE_DIR  "/var/run/lsm"
 #define SOCKET_DIR BASE_DIR"/ipc"
@@ -155,6 +156,11 @@ void drop_privileges(void)
                     loud("Unexpected error on setgid(errno %d)\n", err);
                 }
 
+                if( -1 == setgroups(1, &pw->pw_gid) ) {
+                    err = errno;
+                    loud("Unexpected error on setgroups(errno %d)\n", err);
+                }
+
                 if( -1 == setuid(pw->pw_uid) ) {
                     err = errno;
                     loud("Unexpected error on setuid(errno %d)\n", err);