e3ffa8c31f
policycoreutils: newrole retain CAP_SETPCAP
...
We retain CAP_SETPCAP so that we can drop the additional capabilities
we held onto to set up namespaces.
While we are at it, just add some console whine in case things fail.
Signed-off-by: Eric Paris <eparis@redhat.com>
Acked-by: Dan Walsh <dwalsh@redhat.com>
2011-08-03 18:02:36 -04:00
cba027c249
Exit newrole if capabilities can't be dropped
...
Signed-off-by: Steve Lawrence <slawrence@tresys.com>
2010-12-20 15:13:33 -05:00
16d1c1cbe5
Move newrole to use libcap-ng
...
Signed-off-by: Steve Lawrence <slawrence@tresys.com>
2010-12-20 15:13:28 -05:00
3084b9a1f9
Fix double free in newrole when it fails to exec.
...
Signed-off-by: Chad Sellers <csellers@tresys.com>
2009-12-30 16:59:48 -05:00
bcd43e0bf1
Author: Daniel J Walsh
...
Email: dwalsh@redhat.com
Subject: newrole error message corrections.
Date: Fri, 07 Nov 2008 09:37:52 -0500
Signed-off-by: Joshua Brindle <method@manicmethod.com>
2008-11-07 16:49:04 -05:00
13cd4c8960
initial import from svn trunk revision 2950
2008-08-19 15:30:36 -04:00
Eric Paris
Steve Lawrence
Daniel J Walsh
Chad Sellers
Joshua Brindle