From e026c242af5b724da53e4944aab2645547644cf7 Mon Sep 17 00:00:00 2001 From: Lennart Poettering Date: Fri, 23 Jan 2015 01:12:10 +0100 Subject: import: we need CAP_DAC_OVERRIDE for untarring systems after all --- src/import/import-common.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/src/import/import-common.c b/src/import/import-common.c index f4643133e9..e5531b89c5 100644 --- a/src/import/import-common.c +++ b/src/import/import-common.c @@ -471,7 +471,8 @@ int import_fork_tar(const char *path, pid_t *ret) { (1ULL << CAP_FOWNER) | (1ULL << CAP_FSETID) | (1ULL << CAP_MKNOD) | - (1ULL << CAP_SETFCAP); + (1ULL << CAP_SETFCAP) | + (1ULL << CAP_DAC_OVERRIDE); /* Child */ -- cgit v1.2.3-54-g00ecf