File: 20-capabilities

package info (click to toggle)
fai 6.5.4
  • links: PTS, VCS
  • area: main
  • in suites: forky, sid
  • size: 2,076 kB
  • sloc: sh: 6,720; perl: 5,626; makefile: 138
file content (22 lines) | stat: -rwxr-xr-x 576 bytes parent folder | download | duplicates (2)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
#!/bin/bash
#
# Capabilities get lost when creating the fai base.tar.xz image.
# Restore them here.
#

set -e

if [ ! -x $target/sbin/setcap ] ; then
    exit 0
fi

for FILE in /bin/ping /bin/ping6 /usr/bin/fping /usr/bin/fping6; do
    if [ -x $target/$FILE ] && [ ! -h $target/$FILE ] ; then
        if $ROOTCMD /sbin/setcap cap_net_raw+ep $FILE; then
            echo "Setcap worked! $FILE is not suid!"
        fi
    fi
done
if [ -x $target/usr/bin/systemd-detect-virt ] ; then
    $ROOTCMD /sbin/setcap cap_dac_override,cap_sys_ptrace+ep /usr/bin/systemd-detect-virt
fi