diff --git a/daemon/oci_linux.go b/daemon/oci_linux.go
index 3d34dcb31d..a5a5acfdc0 100644
--- a/daemon/oci_linux.go
+++ b/daemon/oci_linux.go
@@ -195,6 +195,7 @@ func getUser(c *container.Container, username string) (specs.User, error) {
 	}
 	usr.UID = uint32(execUser.Uid)
 	usr.GID = uint32(execUser.Gid)
+	usr.AdditionalGids = []uint32{usr.GID}
 
 	var addGroups []int
 	if len(c.HostConfig.GroupAdd) > 0 {