[3.14] gh-94632: document the subprocess need for extra_groups=() with user= (GH-148129) (#148130)

gh-94632: document the subprocess need for extra_groups=() with user= (GH-148129)
(cherry picked from commit a1cf4430ed)

Co-authored-by: Gregory P. Smith <68491+gpshead@users.noreply.github.com>
This commit is contained in:
Miss Islington (bot) 2026-04-05 20:13:29 +02:00 committed by GitHub
parent f74e2ee2d3
commit 9bc5bc5618
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -630,6 +630,12 @@ functions.
the value in ``pw_uid`` will be used. If the value is an integer, it will
be passed verbatim. (POSIX only)
.. note::
Specifying *user* will not drop existing supplementary group memberships!
The caller must also pass ``extra_groups=()`` to reduce the group membership
of the child process for security purposes.
.. availability:: POSIX
.. versionadded:: 3.9