diff options
| author |   Seebs <seebs@seebs.net> | 2016-12-12 14:27:54 -0600 |
|---|---|---|
| committer | Seebs <seebs@seebs.net> | 2016-12-12 14:27:54 -0600 |
| commit | 041185e324113cf12bf26deea1df763622c02c21 (patch) | |
| tree | 15245a1e9a86cfab2e023b0e0596ae54b6cccfb5 /ChangeLog.txt | |
| parent | bd45c2d860de783433bedd3832c0c2c574591a3b (diff) | |
| download | pseudo-041185e324113cf12bf26deea1df763622c02c21.tar.gz pseudo-041185e324113cf12bf26deea1df763622c02c21.tar.bz2 pseudo-041185e324113cf12bf26deea1df763622c02c21.zip | |
The setcap utility supplied by libcap is used to set capabilities on a
file. Before setting a file's capabilities with cap_set_file() (which uses
setxattr()) it calls cap_set_flag(mycaps, CAP_EFFECTIVE, 1, &capflag,
CAP_SET). cap_set_flag() uses the capset syscall to raise the process'
effective capability. In most cases if the process isn't running as root
this will fail and setcap will exit with an error. Because setxattr is
intercepted by pseudo it's unnecessary for setcap to call capset().
Override capset with a pseudo function that does nothing and always
returns 0.
Signed-off-by: George McCollister <george.mccollister at gmail.com>
Signed-off-by: Seebs <seebs@seebs.net>
Diffstat (limited to 'ChangeLog.txt')
| -rw-r--r-- | ChangeLog.txt | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/ChangeLog.txt b/ChangeLog.txt index d2f93b0..1539411 100644 --- a/ChangeLog.txt +++ b/ChangeLog.txt @@ -5,6 +5,7 @@ * All of these from: Gaël PORTAY <gael.portay@savoirfairelinux.com> * (seebs) import fix from Rabin Vincent for test case * (seebs) import fix from Rabin Vincent for pthread mutexes + * (seebs) import fix from George McCollister for capset. 2016-11-23: * (seebs) actually wait on server shutdown for pseudo -S [cmd] |