mir/lxc
2
0
Fork 0
mirror of git://github.com/lxc/lxc synced 2025-09-01 19:39:29 +00:00
Code Issues Releases Wiki Activity

add capabilities for lxc-checkpoint

Browse Source 
add capabilities for lxc-checkpoint

Signed-off-by: Michel Normand <normand@fr.ibm.com>
Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>
This commit is contained in:
Michel Normand
2009-11-17 22:57:46 +01:00
committed by Daniel Lezcano
parent 6e4bb2e01f
commit bcc23654af
1 changed files with 6 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
src/lxc/lxc-setcap.in
View File

@@ -28,10 +28,12 @@
LXC_CREATE_CAPS="cap_sys_admin" LXC_CREATE_CAPS="cap_sys_admin"
LXC_NETSTAT_CAPS="cap_sys_admin" LXC_NETSTAT_CAPS="cap_sys_admin"
LXC_INIT_CAPS="cap_sys_admin,cap_dac_override" LXC_INIT_CAPS="cap_sys_admin,cap_dac_override"
LXC_UNSHARE_CAPS="cap_net_admin,cap_net_raw,cap_sys_admin,cap_dac_override" LXC_COMMON_CAPS="cap_net_admin,cap_net_raw,cap_sys_admin,cap_dac_override"
LXC_START_CAPS="cap_fowner,cap_sys_chroot,cap_setpcap,cap_net_admin,cap_net_raw,cap_sys_admin,cap_dac_override" LXC_UNSHARE_CAPS=$LXC_COMMON_CAPS
LXC_START_CAPS="$LXC_COMMON_CAPS,cap_fowner,cap_sys_chroot,cap_setpcap"
LXC_EXECUTE_CAPS=$LXC_START_CAPS LXC_EXECUTE_CAPS=$LXC_START_CAPS
LXC_RESTART_CAPS=$LXC_START_CAPS LXC_RESTART_CAPS=$LXC_START_CAPS
LXC_CHECKPOINT_CAPS="$LXC_COMMON_CAPS,cap_sys_ptrace"
LXC_DROP_CAPS="" LXC_DROP_CAPS=""
@@ -48,6 +50,7 @@ lxc_setcaps()
setcap $LXC_RESTART_CAPS=ep @BINDIR@/lxc-restart setcap $LXC_RESTART_CAPS=ep @BINDIR@/lxc-restart
setcap $LXC_UNSHARE_CAPS=ep @BINDIR@/lxc-unshare setcap $LXC_UNSHARE_CAPS=ep @BINDIR@/lxc-unshare
setcap $LXC_NETSTAT_CAPS=ep @BINDIR@/lxc-netstat setcap $LXC_NETSTAT_CAPS=ep @BINDIR@/lxc-netstat
setcap $LXC_CHECKPOINT_CAPS=ep @BINDIR@/lxc-checkpoint
setcap $LXC_INIT_CAPS=ep @LIBEXECDIR@/lxc-init setcap $LXC_INIT_CAPS=ep @LIBEXECDIR@/lxc-init
test -e @LXCPATH@ || mkdir -p @LXCPATH@ test -e @LXCPATH@ || mkdir -p @LXCPATH@
@@ -62,6 +65,7 @@ lxc_dropcaps()
setcap -r @BINDIR@/lxc-restart setcap -r @BINDIR@/lxc-restart
setcap -r @BINDIR@/lxc-unshare setcap -r @BINDIR@/lxc-unshare
setcap -r @BINDIR@/lxc-netstat setcap -r @BINDIR@/lxc-netstat
setcap -r @BINDIR@/lxc-checkpoint
setcap -r @LIBEXECDIR@/lxc-init setcap -r @LIBEXECDIR@/lxc-init
chmod 0755 @LXCPATH@ chmod 0755 @LXCPATH@
} }