Bitlbee does not drop groups correctly in unix.c
|Reported by:||David :)||Owned by:|
|IRC client+version:||Client-independent||Operating System:||Public server|
When 'dropping privileges' bitlbee simply does a 'setgid' followed by a 'setuid' call in unix.c. However, this is not sufficient. The code needs to 'drop' the extra groups that the process was started with through initgroups or setgroups.