8 Commits

Author	SHA1	Message	Date
Dan Walsh	e23c73a167	policycoreutils: newrole: do not drop capabilities when newrole is run as root ... If you run newrole as root and it drops capabilities, the next shell script does not have any capabilities and can not function. newrole -L TopSecret Would end up with a root shell and no capabilities. Signed-off-by: Eric Paris <eparis@redhat.com> Acked-by: Dan Walsh <dwalsh@redhat.com>	2012-09-12 12:16:01 -04:00
Dan Walsh	40b0cea919	policycoreutils: newrole: Use correct capng calls in newrole ... Signed-off-by: Eric Paris <eparis@redhat.com> Acked-by: Dan Walsh <dwalsh@redhat.com>	2012-03-28 14:52:13 -04:00
Eric Paris	e3ffa8c31f	policycoreutils: newrole retain CAP_SETPCAP ... We retain CAP_SETPCAP so that we can drop the additional capabilities we held onto to set up namespaces. While we are at it, just add some console whine in case things fail. Signed-off-by: Eric Paris <eparis@redhat.com> Acked-by: Dan Walsh <dwalsh@redhat.com>	2011-08-03 18:02:36 -04:00
Steve Lawrence	cba027c249	Exit newrole if capabilities can't be dropped ... Signed-off-by: Steve Lawrence <slawrence@tresys.com>	2010-12-20 15:13:33 -05:00
Daniel J Walsh	16d1c1cbe5	Move newrole to use libcap-ng ... Signed-off-by: Steve Lawrence <slawrence@tresys.com>	2010-12-20 15:13:28 -05:00
Chad Sellers	3084b9a1f9	Fix double free in newrole when it fails to exec. ... Signed-off-by: Chad Sellers <csellers@tresys.com>	2009-12-30 16:59:48 -05:00
Joshua Brindle	bcd43e0bf1	Author: Daniel J Walsh ... Email: dwalsh@redhat.com Subject: newrole error message corrections. Date: Fri, 07 Nov 2008 09:37:52 -0500 Signed-off-by: Joshua Brindle <method@manicmethod.com>	2008-11-07 16:49:04 -05:00
Joshua Brindle	13cd4c8960	initial import from svn trunk revision 2950	2008-08-19 15:30:36 -04:00