fix: remove unused gid variable in macOS implementation

Since we're keeping the jail group instead of using the original user's
group, we don't need to parse SUDO_GID anymore.

Co-authored-by: f0ssel <[email protected]>

Author: blink-so[bot]

network/macos.go

@@ -110,19 +110,14 @@ func (m *MacOSNetJail) Execute(command []string, extraEnv map[string]string) err
 			if err != nil {
 				m.logger.Warn("Invalid SUDO_UID, subprocess will run as root", "sudo_uid", sudoUID, "error", err)
 			} else {
-				gid, err := strconv.Atoi(sudoGID)
-				if err != nil {
-					m.logger.Warn("Invalid SUDO_GID, subprocess will run as root", "sudo_gid", sudoGID, "error", err)
-				} else {
-					// Use original user ID but KEEP the jail group for network isolation
-					cmd.SysProcAttr = &syscall.SysProcAttr{
-						Credential: &syscall.Credential{
-							Uid: uint32(uid),
-							Gid: uint32(m.groupID), // Keep jail group, not original user's group
-						},
-					}
-					m.logger.Debug("Dropping privileges to original user with jail group", "uid", uid, "jail_gid", m.groupID)
+				// Use original user ID but KEEP the jail group for network isolation
+				cmd.SysProcAttr = &syscall.SysProcAttr{
+					Credential: &syscall.Credential{
+						Uid: uint32(uid),
+						Gid: uint32(m.groupID), // Keep jail group, not original user's group
+					},
 				}
+				m.logger.Debug("Dropping privileges to original user with jail group", "uid", uid, "jail_gid", m.groupID)
 			}
 		}
 	} else {