From: Kees Monshouwer <mind04@monshouwer.org>
Date: Mon, 22 Apr 2013 19:54:50 +0000 (+0200)
Subject: add supplementary groups support
X-Git-Tag: auth-3.3-rc1~40^2
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=refs%2Fpull%2F810%2Fhead;p=thirdparty%2Fpdns.git

add supplementary groups support
---

diff --git a/pdns/unix_utility.cc b/pdns/unix_utility.cc
index d7b906773d..507b431324 100644
--- a/pdns/unix_utility.cc
+++ b/pdns/unix_utility.cc
@@ -99,11 +99,19 @@ void Utility::dropPrivs( int uid, int gid )
     else
       theL()<<Logger::Info<<"Set effective group id to "<<gid<<endl;
 
-    if(setgroups(0, NULL)<0) {
-      theL()<<Logger::Critical<<"Unable to drop supplementary gids: "<<stringerror()<<endl;
-      exit(1);
+    struct passwd *pw=getpwuid(uid);
+    if(!pw) {
+      theL()<<Logger::Warning<<"Unable to determine user name for uid "<<uid<<endl;
+      if (setgroups(0, NULL)<0) {
+        theL()<<Logger::Critical<<"Unable to drop supplementary gids: "<<stringerror()<<endl;
+        exit(1);
+      }
+    } else {
+      if (initgroups(pw->pw_name, gid)<0) {
+        theL()<<Logger::Critical<<"Unable to set supplementary groups: "<<stringerror()<<endl;
+        exit(1);
+      }
     }
-
   }
 
   if(uid) {