Merge pull request from GHSA-rc4r-wh2q-q6c4

AdditionalGids must include effective group ID
This commit is contained in:
Sebastiaan van Stijn 2022-09-08 21:29:35 +02:00 committed by GitHub
commit de7af816e7
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -198,6 +198,7 @@ func getUser(c *container.Container, username string) (specs.User, error) {
}
usr.UID = uint32(execUser.Uid)
usr.GID = uint32(execUser.Gid)
usr.AdditionalGids = []uint32{usr.GID}
var addGroups []int
if len(c.HostConfig.GroupAdd) > 0 {