sandstorm-io/sandstorm — pull request #187 by amluto (2014-12-16 02:03:59+00:00)
Title: supervisor: Deny setgroups before writing the gid map

The fix for CVE-2014-8989 is likely to break Sandstorm without this
change.