0
@@ -211,11 +211,14 @@ private
0
     begin
0
       if user.is_a?(String)
0
         pw = Etc.getpwnam(user)
0
+				username = user
0
         uid = pw.uid
0
         gid = pw.gid
0
       else
0
+				pw = Etc.getpwuid(user)
0
+				username = pw.name
0
         uid = user
0
-				gid = Etc.getpwuid(uid).gid
0
+				gid = pw.gid
0
       end
0
     rescue
0
       return false
0
@@ -223,6 +226,7 @@ private
0
     if uid == ROOT_UID
0
       return false
0
     else
0
+			Process.groups = Process.initgroups(username, gid)
0
       Process::Sys.setgid(gid)
0
       Process::Sys.setuid(uid)
0
       return true

0
@@ -26,6 +26,7 @@ shared_examples_for "a spawner that supports lowering of privileges" do
0
       expected_gid = Etc.getpwnam(CONFIG['normal_user_1']).gid
0
       expected_group = Etc.getgrgid(expected_gid).name
0
       group_of_process(app.pid).should == expected_group
0
+			# TODO: check supplementary group list
0
     end
0
   end
0