Thanks for the patch. That may be enough for Debian (i.e., if there's a versioned requirement on glibc), but for upstream, one missing part is an autoconf run-test to ensure that using getgrouplist doesn't cause a segfault. See the note in coreutils/TODO for details.
Are you interested in pursuing this? -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]