ua1zbe
/
aprsc
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

When setting final capabilities, make them inheritable 

so that they are still usable after exec() in live upgrade
This commit is contained in:
Heikki Hannikainen 2012-10-21 21:33:14 +03:00
parent 8a6611e90c
commit d611100a48
1 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
src/aprsc.c
View File

@ -420,6 +420,14 @@ static int set_final_capabilities(void)
goto end_caps;
}
/* when we exec() myself in live upgrade, these capabilities are also
* needed by the new process. INHERITABLE FTW!
*/
if (cap_set_flag(caps, CAP_INHERITABLE, NCAPS_FINAL, cap_list, CAP_SET) == -1) {
hlog(LOG_ERR, "aprsc: Failed to set final inheritable POSIX capability flags: %s", strerror(errno));
goto end_caps;
}
//fprintf(stderr, "aprsc: going to set: %s\n", cap_to_text(caps, NULL));
ret = 1;
} else {