[389-commits] [389-ds-base] 01/01: Ticket 48432 - Linux capabilities on ns-slapd

[git repository hosting]

This is an automated email from the git hooks/post-receive script.

firstyear pushed a commit to branch master
in repository 389-ds-base.

commit 92864e0b229a61ba65bd8e923e04f08bef48e2b2
Author: William Brown <firstyear(a)redhat.com&gt;
Date:   Fri Mar 10 15:17:35 2017 +1000

    Ticket 48432 - Linux capabilities on ns-slapd
    
    Bug Description:  Support capabilities on ns-slapd allowing dirsrv
    to start the Directory Server service directly.
    
    Fix Description:  Fix the rpm spec to set the capabilities. This
    should allow us to run with systemd and docker without root
    privs.
    
    https://pagure.io/389-ds-base/issue/48432
    
    Author: wibrown
    
    Review by: mreynolds, lslebodn (Thanks!)
---
 rpm/389-ds-base.spec.in | 45 ++++++++++++++++++++++++++++++++++++++++++++-
 1 file changed, 44 insertions(+), 1 deletion(-)

diff --git a/rpm/389-ds-base.spec.in b/rpm/389-ds-base.spec.in
index a76d00e..83bc204 100644
--- a/rpm/389-ds-base.spec.in
+++ b/rpm/389-ds-base.spec.in
@@ -489,7 +489,50 @@ fi
 %{_datadir}/%{pkgname}
 %{_unitdir}
 %{_bindir}/*
-%{_sbindir}/*
+# We have to seperate this from being a glob to ensure the caps are applied.
+%caps(CAP_NET_BIND_SERVICE=pe) %{_sbindir}/ns-slapd
+%{_sbindir}/bak2db
+%{_sbindir}/bak2db.pl
+%{_sbindir}/cleanallruv.pl
+%{_sbindir}/db2bak
+%{_sbindir}/db2bak.pl
+%{_sbindir}/db2index
+%{_sbindir}/db2index.pl
+%{_sbindir}/db2ldif
+%{_sbindir}/db2ldif.pl
+%{_sbindir}/dbmon.sh
+%{_sbindir}/dbverify
+%{_sbindir}/dn2rdn
+%{_sbindir}/ds_selinux_enabled
+%{_sbindir}/ds_selinux_port_query
+%{_sbindir}/ds_systemd_ask_password_acl
+%{_sbindir}/fixup-linkedattrs.pl
+%{_sbindir}/fixup-memberof.pl
+%{_sbindir}/ldif2db
+%{_sbindir}/ldif2db.pl
+%{_sbindir}/ldif2ldap
+%{_sbindir}/migrate-ds.pl
+%{_sbindir}/monitor
+%{_sbindir}/ns-accountstatus.pl
+%{_sbindir}/ns-activate.pl
+%{_sbindir}/ns-inactivate.pl
+%{_sbindir}/ns-newpwpolicy.pl
+%{_sbindir}/remove-ds.pl
+%{_sbindir}/restart-dirsrv
+%{_sbindir}/restoreconfig
+%{_sbindir}/saveconfig
+%{_sbindir}/schema-reload.pl
+%{_sbindir}/setup-ds.pl
+%{_sbindir}/start-dirsrv
+%{_sbindir}/status-dirsrv
+%{_sbindir}/stop-dirsrv
+%{_sbindir}/suffix2instance
+%{_sbindir}/syntax-validate.pl
+%{_sbindir}/upgradedb
+%{_sbindir}/upgradednformat
+%{_sbindir}/usn-tombstone-cleanup.pl
+%{_sbindir}/verify-db.pl
+%{_sbindir}/vlvindex
 %{_libdir}/%{pkgname}/perl
 %{_libdir}/%{pkgname}/python
 %dir %{_libdir}/%{pkgname}/plugins

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.