File fix_setgroups_missing_call.patch of Package mcelog

Index: mcelog-1.0.8/mcelog.c
===================================================================
--- mcelog-1.0.8.orig/mcelog.c	2015-01-22 14:56:56.151710136 +0100
+++ mcelog-1.0.8/mcelog.c	2015-01-23 09:58:35.252799171 +0100
@@ -37,6 +37,7 @@
 #include <assert.h>
 #include <signal.h>
 #include <pwd.h>
+#include <grp.h>
 #include <sys/wait.h>
 #include <fnmatch.h>
 #include "mcelog.h"
@@ -1185,6 +1186,14 @@
 
 static void drop_cred(void)
 {
+	/* When dropping privileges from root, the `setgroups` call will
+	 * remove any extraneous groups. If we don't call this, then
+	 * even though our uid has dropped, we may still have groups
+	 * that enable us to do super-user things. This will fail if we
+	 * aren't root, so don't bother checking the return value, this
+	 * is just done as an optimistic privilege dropping function.
+	 */
+	setgroups(0, NULL);
 	if (runcred.uid != -1U && runcred.gid == -1U) {
 		struct passwd *pw = getpwuid(runcred.uid);
 		if (pw)