Missing call to setgroups before setuid

[lgbaldoni]

Another warning from rpmlint I thought of sharing:

tpmd.x86_64: W: missing-call-to-setgroups-before-setuid /usr/sbin/tpmd
This executable is calling setuid and setgid without setgroups or initgroups.
There is a high probability this means it didn't relinquish all groups, and
this would be a potential security issue to be fixed. Seek POS36-C on the web
for details about the problem.

[PeterHuewe]

Hi,
thanks for reporting - can you provide a patch?
That would be great.

[lgbaldoni]

I've had a look at it, but unfortunately I'm not confident enough to meddle with security matters.