diff options
| author | Sami Kerola <kerolasa@iki.fi> | 2019-07-05 20:31:05 +0100 |
|---|---|---|
| committer | Sami Kerola <kerolasa@iki.fi> | 2019-07-05 20:31:05 +0100 |
| commit | 368c345ff9a648ea28ece9725522f5363b869823 (patch) | |
| tree | 8591190c34c889e3b04729043f0c9b410ef6fbe6 | |
| parent | 81bfb31a714641b70c2a7c7d9ce12cf08f98a372 (diff) | |
| download | iputils-368c345ff9a648ea28ece9725522f5363b869823.tar.gz | |
build-sys: remove effective bit from cap_net_raw capability
The iputils that use capabilities raise permissions with cap_set_flag(), so
they do not need executables to have effetive bit set.
Reported-by: Adrian Mouat <adrian.mouat@gmail.com>
Addresses: https://github.com/iputils/iputils/issues/194
Reference: http://man7.org/linux/man-pages/man7/capabilities.7.html
Signed-off-by: Sami Kerola <kerolasa@iki.fi>
| -rwxr-xr-x | build-aux/setcap-setuid.sh | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/build-aux/setcap-setuid.sh b/build-aux/setcap-setuid.sh index f832978..01f167d 100755 --- a/build-aux/setcap-setuid.sh +++ b/build-aux/setcap-setuid.sh @@ -16,7 +16,7 @@ case "$perm_type" in # https://github.com/iputils/iputils/issues/175 ;; 'caps') - echo "$0: calling: $setcap cap_net_raw+ep $exec_path" + echo "$0: calling: $setcap cap_net_raw+p $exec_path" "$setcap" 'cap_net_raw+ep' "$exec_path" || true ;; 'setuid') |