otherwise this one won't be considered for permission checks Signed-off-by: Nicolas De Loof <nicolas.deloof@gmail.com> (cherry picked from commit 25345f2c04b2691406d683034d21bb5e51ea982c) Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
@@ -195,6 +195,7 @@ func getUser(c *container.Container, username string) (specs.User, error) {
}
usr.UID = uint32(execUser.Uid)
usr.GID = uint32(execUser.Gid)
+ usr.AdditionalGids = []uint32{usr.GID}
var addGroups []int
if len(c.HostConfig.GroupAdd) > 0 {