Description: Drop supplemental groups.
From: http://git.0pointer.de/?p=rtkit.git;a=commitdiff;h=f9512c9c7d41
---
 rtkit-daemon.c |    4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

--- rtkit.orig/rtkit-daemon.c
+++ rtkit/rtkit-daemon.c
@@ -49,6 +49,7 @@
 #include <pthread.h>
 #include <dirent.h>
 #include <syslog.h>
+#include <grp.h>
 
 #include "rtkit.h"
 #include "sd-daemon.h"
@@ -1777,7 +1778,8 @@ static int drop_privileges(void) {
                 }
 
                 /* Fourth, drop privs */
-                if (setresgid(pw->pw_gid, pw->pw_gid, pw->pw_gid) < 0 ||
+                if (setgroups(0, NULL) < 0 ||
+                    setresgid(pw->pw_gid, pw->pw_gid, pw->pw_gid) < 0 ||
                     setresuid(pw->pw_uid, pw->pw_uid, pw->pw_uid) < 0) {
                         r = -errno;
                         syslog(LOG_ERR, "Failed to become %s: %s\n", username, strerror(errno));