Merge pull request #229 from thaJeztah/user_deref_sgids

user: GetExecUser: always clone default Sgids

Author: thaJeztah

user/user.go

@@ -296,15 +296,10 @@ func GetExecUser(userSpec string, defaults *ExecUser, passwd, group io.Reader) (
 	user := &ExecUser{
 		Uid:   defaults.Uid,
 		Gid:   defaults.Gid,
-		Sgids: defaults.Sgids,
+		Sgids: append([]int{}, defaults.Sgids...), // Sgids slice *cannot* be nil.
 		Home:  defaults.Home,
 	}
 
-	// Sgids slice *cannot* be nil.
-	if user.Sgids == nil {
-		user.Sgids = []int{}
-	}
-
 	// Allow for userSpec to have either "user", or optionally "user:group" syntax.
 	userArg, groupArg, _ := strings.Cut(userSpec, ":")