From 6c295a9a71924478a344e7b447ff3b44b1e94511 Mon Sep 17 00:00:00 2001 From: Russ Cox Date: Tue, 18 Oct 2016 22:56:14 -0400 Subject: syscall: for ForkExec on Linux, always use 32-bit setgroups system call Fixes #17092. Change-Id: If203d802a919e00594ddc1282782fc59a083fd63 Reviewed-on: https://go-review.googlesource.com/31458 Reviewed-by: Brad Fitzpatrick --- src/syscall/exec_linux.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'src/syscall/exec_linux.go') diff --git a/src/syscall/exec_linux.go b/src/syscall/exec_linux.go index 39764f7076..b0cad52f7b 100644 --- a/src/syscall/exec_linux.go +++ b/src/syscall/exec_linux.go @@ -214,7 +214,7 @@ func forkAndExecInChild(argv0 *byte, argv, envv []*byte, chroot, dir *byte, attr // and disabled setgroups, because otherwise unprivileged user namespace // will fail with any non-empty SysProcAttr.Credential. if !(sys.GidMappings != nil && !sys.GidMappingsEnableSetgroups && ngroups == 0) { - _, _, err1 = RawSyscall(SYS_SETGROUPS, ngroups, groups, 0) + _, _, err1 = RawSyscall(_SYS_setgroups, ngroups, groups, 0) if err1 != 0 { goto childerror } -- cgit v1.3-5-g9baa