2007-11-30 19:44:20

by Jeff Dike

[permalink] [raw]
Subject: capabilities-introduce-per-process-capability-bounding-set.patch breaks FC6 Avahi

avahi-daemon fails to start on FC6 when
capabilities-introduce-per-process-capability-bounding-set.patch is
applied.

strace shows
capset(0x19980330, 0, {CAP_SETGID|CAP_SETUID|CAP_SYS_CHROOT, CAP_SETGID|CAP_SETUID|CAP_SYS_CHROOT, 0}) = -1 EPERM (Operation not permitted)

I don't know if this is expected, but the changelog doesn't seem to
imply that this will break things.

Jeff

--
Work email - jdike at linux dot intel dot com


2007-11-30 22:30:00

by Jiri Slaby

[permalink] [raw]
Subject: Re: capabilities-introduce-per-process-capability-bounding-set.patch breaks FC6 Avahi

On 11/30/2007 08:41 PM, Jeff Dike wrote:
> avahi-daemon fails to start on FC6 when
> capabilities-introduce-per-process-capability-bounding-set.patch is
> applied.
>
> strace shows
> capset(0x19980330, 0, {CAP_SETGID|CAP_SETUID|CAP_SYS_CHROOT, CAP_SETGID|CAP_SETUID|CAP_SYS_CHROOT, 0}) = -1 EPERM (Operation not permitted)
>
> I don't know if this is expected, but the changelog doesn't seem to
> imply that this will break things.

Nope, try this :):
http://lkml.org/lkml/2007/11/28/390

regards,
--
Jiri Slaby ([email protected])
Faculty of Informatics, Masaryk University

2007-12-01 00:21:28

by Jeff Dike

[permalink] [raw]
Subject: Re: capabilities-introduce-per-process-capability-bounding-set.patch breaks FC6 Avahi

On Fri, Nov 30, 2007 at 11:29:47PM +0100, Jiri Slaby wrote:
> Nope, try this :):
> http://lkml.org/lkml/2007/11/28/390

Excellent, thanks.

I just wanted to make sure that someone knew about this.

Jeff

--
Work email - jdike at linux dot intel dot com