File: root-without-cap-sys-admin

package info (click to toggle)
mmdebstrap 1.5.7-3
  • links: PTS, VCS
  • area: main
  • in suites: forky, sid
  • size: 1,724 kB
  • sloc: perl: 6,092; sh: 4,497; python: 1,269; makefile: 22
file content (17 lines) | stat: -rw-r--r-- 562 bytes parent folder | download | duplicates (3)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
#!/bin/sh
set -eu
export LC_ALL=C.UTF-8
[ "$(whoami)" = "root" ]

if grep --null-data --quiet --no-messages '^container=lxc$' /proc/1/environ; then
  # see https://stackoverflow.com/questions/65748254/
  echo "cannot run under lxc -- Skipping test..." >&2
  exit 0
fi

capsh --drop=cap_sys_admin -- -c 'exec "$@"' exec \
  {{ CMD }} --mode=root --variant=apt \
  --customize-hook='chroot "$1" sh -c "test ! -e /proc/self/fd"' \
  {{ DIST }} /tmp/debian-chroot.tar {{ MIRROR }}
tar -tf /tmp/debian-chroot.tar | sort | diff -u tar1.txt -
rm /tmp/debian-chroot.tar