Doh, called diff the wrong way around. Add -R to patch to get the patch to work.
The patch also fixes the call to initgroups. As it stands, the user script could be left running with root's secondary groups.
Doh, called diff the wrong way around. Add -R to patch to get the patch to work.
The patch also fixes the call to initgroups. As it stands, the user script could be left running with root's secondary groups.