From: Christian Brauner <christian.brauner@ubuntu.com>
Date: Wed, 11 Apr 2018 15:35:57 +0000 (+0200)
Subject: attach: try to always drop supplementary groups
X-Git-Tag: lxc-3.1.0~332^2
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=refs%2Fpull%2F2270%2Fhead;p=thirdparty%2Flxc.git

attach: try to always drop supplementary groups

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
---

diff --git a/src/lxc/attach.c b/src/lxc/attach.c
index 3b7152721..e1699b137 100644
--- a/src/lxc/attach.c
+++ b/src/lxc/attach.c
@@ -873,7 +873,7 @@ static int attach_child_main(struct attach_clone_payload *payload)
 	}
 
 	ret = lxc_setgroups(0, NULL);
-	if (ret < 0)
+	if (ret < 0 && errno != EPERM)
 		goto on_error;
 
 	if ((init_ctx->container && init_ctx->container->lxc_conf &&