fluent/fluentd — pull request #67 by thbishop (2012-09-14 07:30:53+00:00)
Title: Add secondary groups to the process when changing process uid

I ran into this limitation in my environment using the td-agent distribution when trying to tail a file for input. I have a log file which is owned by an app specific user/group and has permissions of 660. I don't want to run fluentd (td-agent) as root nor as my app specific user.

I assumed that adding the td-agent user to my app specific group would inherit the secondary group membership and therefore be able to access my log file; but that's currently not the case.

Attached is a patch which will update the process with any secondary groups when changing the uid of the process.