Call setgroups() before setgid/setuid

fixes #6659

diff --git a/icinga-app/icinga.cpp b/icinga-app/icinga.cpp
index 773917199bde5cfca1219b041d277fa9da06cf70..513d8c211c03991f70800282ed660bedc5d7c6f9 100644 (file)
--- a/icinga-app/icinga.cpp
+++ b/icinga-app/icinga.cpp
@@ -403,6 +403,13 @@ int Main(void)
                        }
                }
 
+               if (setgroups(0, NULL) < 0) {
+                       std::ostringstream msgbuf;
+                       msgbuf << "setgroups() failed with error code " << errno << ", \"" << Utility::FormatErrorNumber(errno) << "\"";
+                       Log(LogCritical, "icinga-app",  msgbuf.str());
+                       return EXIT_FAILURE;
+               }
+
                if (setgid(gr->gr_gid) < 0) {
                        std::ostringstream msgbuf;
                        msgbuf << "setgid() failed with error code " << errno << ", \"" << Utility::FormatErrorNumber(errno) << "\"";