diff options
| -rw-r--r-- | Makefile.am | 6 | ||||
| -rw-r--r-- | configure.ac | 2 | ||||
| -rw-r--r-- | src/shared/virt.c | 8 |
3 files changed, 12 insertions, 4 deletions
diff --git a/Makefile.am b/Makefile.am index 621da03260..0b3013b444 100644 --- a/Makefile.am +++ b/Makefile.am @@ -1403,6 +1403,12 @@ systemd_detect_virt_SOURCES = \ systemd_detect_virt_LDADD = \ libsystemd-shared.la +systemd-detect-virt-install-hook: + $(SETCAP) cap_dac_override,cap_sys_ptrace=ep $(DESTDIR)$(bindir)/systemd-detect-virt ||: + +INSTALL_EXEC_HOOKS += \ + systemd-detect-virt-install-hook + # ------------------------------------------------------------------------------ systemd_delta_SOURCES = \ src/delta/delta.c diff --git a/configure.ac b/configure.ac index 5d7d0c2863..09818d6ec0 100644 --- a/configure.ac +++ b/configure.ac @@ -67,6 +67,8 @@ AC_PATH_PROG([XSLTPROC], [xsltproc]) AC_PATH_PROG([QUOTAON], [quotaon], [/sbin/quotaon]) AC_PATH_PROG([QUOTACHECK], [quotacheck], [/sbin/quotacheck]) +AC_PATH_PROG([SETCAP], [setcap], [/sbin/setcap]) + # gtkdocize greps for '^GTK_DOC_CHECK', so it needs to be on its own line m4_ifdef([GTK_DOC_CHECK], [ GTK_DOC_CHECK([1.18],[--flavour no-tmpl]) diff --git a/src/shared/virt.c b/src/shared/virt.c index 6e44794496..fc62c72328 100644 --- a/src/shared/virt.c +++ b/src/shared/virt.c @@ -159,10 +159,10 @@ int detect_container(const char **id) { /* Unfortunately many of these operations require root access * in one way or another */ - if (geteuid() != 0) - return -EPERM; - - if (running_in_chroot() > 0) { + r = running_in_chroot(); + if (r < 0) + return r; + if (r > 0) { if (id) *id = "chroot"; |