aboutsummaryrefslogtreecommitdiffstats
path: root/main/lxc/make-dropping-setpcap-optional.patch
diff options
context:
space:
mode:
authorKaarle Ritvanen <kaarle.ritvanen@datakunkku.fi>2018-09-29 17:41:20 +0300
committerKaarle Ritvanen <kaarle.ritvanen@datakunkku.fi>2018-09-29 18:37:42 +0300
commit5d95627ba0fb5934ecac88c076affccea193c9b4 (patch)
tree45417fe705fa18a8b0c7a2b178501f68330fdf9b /main/lxc/make-dropping-setpcap-optional.patch
parent003599bbda6663c8a6449ed6fdff67b243f4fa79 (diff)
downloadaports-5d95627ba0fb5934ecac88c076affccea193c9b4.tar.bz2
aports-5d95627ba0fb5934ecac88c076affccea193c9b4.tar.xz
main/lxc: make dropping setpcap optional
Diffstat (limited to 'main/lxc/make-dropping-setpcap-optional.patch')
-rw-r--r--main/lxc/make-dropping-setpcap-optional.patch24
1 files changed, 24 insertions, 0 deletions
diff --git a/main/lxc/make-dropping-setpcap-optional.patch b/main/lxc/make-dropping-setpcap-optional.patch
new file mode 100644
index 0000000000..5288d8f3b4
--- /dev/null
+++ b/main/lxc/make-dropping-setpcap-optional.patch
@@ -0,0 +1,24 @@
+--- lxc-lxc-2.1.1/config/templates/alpine.common.conf.in
++++ lxc-lxc-2.1.1.setpcap/config/templates/alpine.common.conf.in
+@@ -8,7 +8,6 @@
+ lxc.cap.drop = audit_write
+ lxc.cap.drop = ipc_owner
+ lxc.cap.drop = mknod
+-lxc.cap.drop = setpcap
+ lxc.cap.drop = sys_nice
+ lxc.cap.drop = sys_pacct
+ lxc.cap.drop = sys_ptrace
+Only in lxc-lxc-2.1.1.setpcap: config/templates/alpine.common.conf.in.orig
+--- lxc-lxc-2.1.1/templates/lxc-alpine.in
++++ lxc-lxc-2.1.1.setpcap/templates/lxc-alpine.in
+@@ -398,6 +398,9 @@
+ # hostname(1).
+ lxc.cap.drop = sys_admin
+
++ # Comment this out if required by your applications.
++ lxc.cap.drop = setpcap
++
+ # Include common configuration.
+ lxc.include = $LXC_TEMPLATE_CONFIG/alpine.common.conf
+ EOF
+Only in lxc-lxc-2.1.1.setpcap: templates/lxc-alpine.in.orig