commit ee4d611c467a8bef74a9b8e13b7ff103b64591b1
author Elliott Hughes <enh@google.com> Fri Sep 29 22:46:09 2017 +0000
committer android-build-merger <android-build-merger@google.com> Fri Sep 29 22:46:09 2017 +0000
tree 9c3c86c755c496f22c50baacdf8c89b41887d80e
parent 2e12030ca532a71fe20b35233462a0dbb51164ee
parent e80beca2553f1c95a3e138dfa481304d9a863dd0

Merge "run-as: Keep supplementary groups."
am: e80beca255

Change-Id: I971873b279dae899ae45718aa569681407e9a31f

run-as/run-as.cpp

diff --git a/run-as/run-as.cpp b/run-as/run-as.cpp
index e7b8cc2..b27cfad 100644
--- a/run-as/run-as.cpp
+++ b/run-as/run-as.cpp
@@ -194,6 +194,7 @@
   ScopedMinijail j(minijail_new());
   minijail_change_uid(j.get(), uid);
   minijail_change_gid(j.get(), gid);
+  minijail_keep_supplementary_gids(j.get());
   minijail_enter(j.get());
 
   if (selinux_android_setcontext(uid, 0, info.seinfo, pkgname) < 0) {