diff options
| author | Lennart Poettering <lennart@poettering.net> | 2012-05-29 23:33:38 +0200 |
|---|---|---|
| committer | Lennart Poettering <lennart@poettering.net> | 2012-05-29 23:35:17 +0200 |
| commit | 939b8f14dcd9312140d001b55b4e7a87173682ef (patch) | |
| tree | bd67229d635bdff07e0a6b8e3da90d82eb00bd70 /src/shared/capability.h | |
| parent | 9246319f1fd9625a4a43883ae660ecd5ae41423a (diff) | |
capabilities: when dropping capabilities system-wide also drop them from usermode helpers
This hooks things up with /proc/sys/kernel/usermodehelper/bset and
/proc/sys/kernel/usermodehelper/inheritable.
Diffstat (limited to 'src/shared/capability.h')
| -rw-r--r-- | src/shared/capability.h | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/src/shared/capability.h b/src/shared/capability.h index 0cc5dd08aa..6cb31bb510 100644 --- a/src/shared/capability.h +++ b/src/shared/capability.h @@ -27,6 +27,7 @@ unsigned long cap_last_cap(void); int have_effective_cap(int value); -int capability_bounding_set_drop(uint64_t caps, bool right_now); +int capability_bounding_set_drop(uint64_t drop, bool right_now); +int capability_bounding_set_drop_usermode(uint64_t drop); #endif |