From b41c864d569357a102ee2335a4947e59e5e2b08a Mon Sep 17 00:00:00 2001 From: Matthew Heon Date: Thu, 27 Feb 2020 16:08:29 -0500 Subject: Ensure that exec sessions inherit supplemental groups This corrects a regression from Podman 1.4.x where container exec sessions inherited supplemental groups from the container, iff the exec session did not specify a user. Signed-off-by: Matthew Heon --- libpod/container_api.go | 5 ----- 1 file changed, 5 deletions(-) (limited to 'libpod/container_api.go') diff --git a/libpod/container_api.go b/libpod/container_api.go index d612341bc..dabbe27dc 100644 --- a/libpod/container_api.go +++ b/libpod/container_api.go @@ -270,11 +270,6 @@ func (c *Container) Exec(tty, privileged bool, env map[string]string, cmd []stri } }() - // if the user is empty, we should inherit the user that the container is currently running with - if user == "" { - user = c.config.User - } - opts := new(ExecOptions) opts.Cmd = cmd opts.CapAdd = capList -- cgit v1.2.3-54-g00ecf