attach: try to always drop supplementary groups

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

diff --git a/src/lxc/attach.c b/src/lxc/attach.c
index 3b7152721525033c789509e261c46d34cfbd5377..e1699b137d48f55ff48618bb3808b7b88745d43a 100644 (file)
--- a/src/lxc/attach.c
+++ b/src/lxc/attach.c
@@ -873,7 +873,7 @@ static int attach_child_main(struct attach_clone_payload *payload)
        }
 
        ret = lxc_setgroups(0, NULL);
-       if (ret < 0)
+       if (ret < 0 && errno != EPERM)
                goto on_error;
 
        if ((init_ctx->container && init_ctx->container->lxc_conf &&