https://bugzilla.novell.com/show_bug.cgi?id=859298 https://bugzilla.novell.com/show_bug.cgi?id=859298#c15 --- Comment #15 from Reinhard Max <max@suse.com> 2014-08-28 15:24:21 CEST --- Looking at the source again, I realized that dnsmasq doesn't actually drop the dnsmasq user's supplementary groups. The group dropping happens before the user switch, so only the calling processes (i.e. root's) supplementary groups (if any) get dropped. Subsequently dnsmasq misses to initialize the supplementary groups of the target user before switching to it. I'll change the setgroups() call into an initgroups() call, so that any existing supplementary groups get replaced by the ones the new user is member of. While being there, shall I also change the dnsmasq user from nogroup to a newly created dnsmasq group? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.