Bug#1015969: kscreenlocker_greet: missing audit_write capability

[Christian Göttsche <cgzones@googlemail.com>]

Package: libkscreenlocker5
Version: 5.25.3-1
Severity: important


kscreenlocker_greet needs the capability AUDIT_WRITE to be able to
issue audit events on unlock, like:

    Jaudit[31282]: USER_AUTH pid=31282 uid=1000 auid=1000 ses=30
subj=xuser_u:xuser_r:kscreenlocker_greet_t:s0
msg='op=PAM:authentication grantors=pam_permit,pam_cap
acct="christian"
exe="/usr/lib/x86_64-linux-gnu/libexec/kscreenlocker_greet" hostnam>

Maybe add something like the following to postinst:

    # Set the capabilities
    if command -v setcap > /dev/null && setcap "CAP_AUDIT_WRITE=+ep"
/usr/lib/$(ARCH)/libexec/kscreenlocker_greet; then
        echo "Successfully set capabilities for kscreenlocker_greet"
    else
        echo "Failed to set capabilities for kscreenlocker_greet" >&2
    fi