Allow portage to set file capabilities, needed for installations like for wireshark
PATCH 2/4 Allow portage to set file capabilities, needed for installations like for wireshark
The installation of the wireshark package (and perhaps others) requires portage setting file capabilities (through the setcap binary).
Signed-off-by Sven Vermeulen <[email protected]>
--- policy/modules/admin/portage.te | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-)
policy/modules/admin/portage.te +1 -1
@@ -125,7 +125,7 @@ optional_policy(` # - setexec to run portage fetch allow portage_t self:process { setfscreate setexec }; # - kill for mysql merging, at least -allow portage_t self:capability { sys_nice kill }; +allow portage_t self:capability { sys_nice kill setfcap }; # user post-sync scripts can_exec(portage_t, portage_conf_t)
Signature · 1 line
1.7.3.4
PATCH 2/4 Allow portage to set file capabilities, needed for installations like for wireshark
Quoted 2 lines · Sven Vermeulen
The installation of the wireshark package (and perhaps others) requires portage setting file capabilities (through the setcap binary).
Merged.
Quoted 18 lines
Signed-off-by Sven Vermeulen <[email protected]>--- policy/modules/admin/portage.te | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-)policy/modules/admin/portage.te +1
-1@@ -125,7 +125,7 @@ optional_policy(` # - setexec to run portage fetch allow portage_t self:process { setfscreate setexec }; # - kill for mysql merging, at least -allow portage_t self:capability { sys_nice kill }; +allow portage_t self:capability { sys_nice kill setfcap }; # user post-sync scripts can_exec(portage_t, portage_conf_t)
Signature · 3 lines
Chris PeBenito Tresys Technology, LLC www.tresys.com | oss.tresys.com