[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Setting file capabilites of files shipped in binary packages



On Mon, 2011-03-14 at 09:17 +0100, Sebastian Harl wrote:
[...]
> > > Would it be fine to do that in postinst?
> > 
> > It must be done in postinst, and you may need to fall back to setuid if
> > the filesystem does not support setcap.
> 
> Do you know of a way to find out if the filesystem supports setcap
> (other than trying out ;-))?

No, I don't think there's a way to do that programmatically.  You would
just have to try capset and then chmod u+s.

Ben.

-- 
Ben Hutchings
Once a job is fouled up, anything done to improve it makes it worse.

Attachment: signature.asc
Description: This is a digitally signed message part


Reply to: