ENH: utils: acquire groups of intelmq user in drop_privileges

certtools · Jul 3, 2024 · 569bf1e · 569bf1e
1 parent dba94eb
commit 569bf1e
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/intelmq/lib/utils.py b/intelmq/lib/utils.py
@@ -692,6 +692,7 @@ def drop_privileges() -> bool:
     """
     if os.geteuid() == 0:
         try:
+            os.setgroups([group.gr_gid for group in grp.getgrall() if 'intelmq' in group.gr_mem])
             os.setgid(grp.getgrnam('intelmq').gr_gid)
             os.setuid(pwd.getpwnam('intelmq').pw_uid)
         except (OSError, KeyError):