compositor: Drop setuid when launching clients
diff --git a/src/compositor.c b/src/compositor.c
index 1fe90cd..0cf01f2 100644
--- a/src/compositor.c
+++ b/src/compositor.c
@@ -96,6 +96,9 @@
 	sigfillset(&allsigs);
 	sigprocmask(SIG_UNBLOCK, &allsigs, NULL);
 
+	/* Launch clients as the user. */
+	seteuid(getuid());
+
 	/* SOCK_CLOEXEC closes both ends, so we dup the fd to get a
 	 * non-CLOEXEC fd to pass through exec. */
 	clientfd = dup(sockfd);