| Subject: | drop_gid_perm does not alter supplemental privileges |
Mark Grimes discovered that when calling the drop_gid_perm() function
provided by Proc::GID, supplemental groups are not dropped. This is
contrary to common expectations, and may result in proceses retaining
privileges they had intended to discard.
Proc::UID should be modified to provided a way to drop supplemental
groups. This may involve changing the behaviour of the drop_gid_perm()
call.