From 569bf1ee08ee60aa76198807c03c77787498db9b Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Mikk=20Margus=20M=C3=B6ll?= <mikk@cert.ee>
Date: Wed, 3 Jul 2024 16:32:44 +0300
Subject: [PATCH] ENH: utils: acquire groups of intelmq user in drop_privileges

---
 intelmq/lib/utils.py | 1 +
 1 file changed, 1 insertion(+)

diff --git a/intelmq/lib/utils.py b/intelmq/lib/utils.py
index 294f4107a..42d551ad9 100644
--- a/intelmq/lib/utils.py
+++ b/intelmq/lib/utils.py
@@ -692,6 +692,7 @@ def drop_privileges() -> bool:
     """
     if os.geteuid() == 0:
         try:
+            os.setgroups([group.gr_gid for group in grp.getgrall() if 'intelmq' in group.gr_mem])
             os.setgid(grp.getgrnam('intelmq').gr_gid)
             os.setuid(pwd.getpwnam('intelmq').pw_uid)
         except (OSError, KeyError):