OpenSSL: avoid loading server's CA-list-for-client-notification on client

[users/heiko/exim.git] / src / OS / os.h-GNU

diff --git a/src/OS/os.h-GNU b/src/OS/os.h-GNU
index 44993163d319da42686679b02a7be987a2741ff2..1de2e3e849dbba3b457145d301351b0db40274d7 100644 (file)
--- a/src/OS/os.h-GNU
+++ b/src/OS/os.h-GNU
@@ -20,4 +20,8 @@ typedef struct flock flock_t;
 /* default is non-const */
 #define ICONV_ARG2_TYPE const char **
 
+/* setgroups(0, NULL) succeeds, and drops the gid group
+as well as any supplementary groups*/
+#define OS_SETGROUPS_ZERO_DROPS_ALL
+
 /* End */