1 files changed, 3 insertions, 6 deletions

diff --git a/src/firejail/join.c b/src/firejail/join.c
index 12ee4a9a0..c303d3fb8 100644
--- a/src/firejail/join.c
+++ b/src/firejail/join.c
@@ -314,12 +314,11 @@ void join(pid_t pid, int argc, char **argv, int index) {
                 // read cfg.protocol from file
                 if (getuid() != 0)
                         protocol_filter_load(RUN_PROTOCOL_CFG);
-                if (cfg.protocol) {     // not available for uid 0
+                if (cfg.protocol)       // not available for uid 0
                         seccomp_load(RUN_SECCOMP_PROTOCOL);     // install filter
-                }
 
                 // set seccomp filter
-                if (apply_seccomp == 1) // not available for uid 0
+                if (apply_seccomp == 1)  // not available for uid 0
                         seccomp_load(RUN_SECCOMP_CFG);
 #endif
 
@@ -335,9 +334,6 @@ void join(pid_t pid, int argc, char **argv, int index) {
                         if (apply_caps == 1)    // not available for uid 0
                                 caps_set(caps);
                 }
-                else
-                        drop_privs(arg_nogroups);       // nogroups not available for uid 0
-
 
                 // set nice
                 if (arg_nice) {
@@ -385,6 +381,7 @@ void join(pid_t pid, int argc, char **argv, int index) {
                         }
                 }
 
+                drop_privs(arg_nogroups);
                 start_application(0);
 
                 // it will never get here!!!