attach: try to always drop supplementary groups

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
This commit is contained in:
Christian Brauner 2018-04-11 17:35:57 +02:00
parent 3d435963b7
commit 96ec54acf8
No known key found for this signature in database
GPG Key ID: 8EB056D53EECB12D

View File

@ -873,7 +873,7 @@ static int attach_child_main(struct attach_clone_payload *payload)
} }
ret = lxc_setgroups(0, NULL); ret = lxc_setgroups(0, NULL);
if (ret < 0) if (ret < 0 && errno != EPERM)
goto on_error; goto on_error;
if ((init_ctx->container && init_ctx->container->lxc_conf && if ((init_ctx->container && init_ctx->container->lxc_conf &&