topjohnwu/selinux
1
0
Fork 0
mirror of https://github.com/topjohnwu/selinux.git synced 2025-02-24 21:31:51 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

policycoreutils: seunshare: Only drop caps not the Bounding Set from seunshare

Browse Source 
This means you can still run setuid programs, but don't need special
perms to run seunshare.

Signed-off-by: Eric Paris <eparis@redhat.com>
Acked-by: Dan Walsh <dwalsh@redhat.com>
This commit is contained in:
Dan Walsh 2012-02-22 15:55:39 -05:00 committed by Eric Paris
parent 5766295bb2
commit 1f0b5bd920
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
policycoreutils/sandbox/seunshare.c
View File

@ -58,7 +58,7 @@
static int verbose = 0;
static int child = 0;
static capng_select_t cap_set = CAPNG_SELECT_BOTH;
static capng_select_t cap_set = CAPNG_SELECT_CAPS;
/**
* This function will drop all capabilities.