[klibc] [PATCH] run-init: add drop_capabilities support

maximilian attems max at stro.at
Tue May 15 22:31:04 PDT 2012


On Thu, 03 May 2012, Kees Cook wrote:

> Building on the work in ff0a614bd724f6c4c6a5014a9955dc1bc028f336,
> this moves the capability code down into the run-init library, so that
> run-init can use it as well, via the new "-d" flag.
> 
> Signed-off-by: Kees Cook <kees at outflux.net>
> ---
>  usr/kinit/Kbuild                |    3 +--
>  usr/kinit/capabilities.h        |   10 ++++++++++
>  usr/kinit/kinit.c               |    6 +++---
>  usr/kinit/run-init/Kbuild       |    9 +++++++--
>  usr/kinit/run-init/run-init.c   |   12 ++++++++----
>  usr/kinit/run-init/run-init.h   |    2 +-
>  usr/kinit/run-init/runinitlib.c |   11 +++++++++--
>  7 files changed, 39 insertions(+), 14 deletions(-)
>  create mode 100644 usr/kinit/capabilities.h

thanks, hpa applied and pushed.



More information about the klibc mailing list