]> git.ipfire.org Git - thirdparty/libvirt.git/commit
util: drop capabilities immediately after changing uid/gid of child
authorLaine Stump <laine@laine.org>
Fri, 1 Feb 2013 21:26:25 +0000 (16:26 -0500)
committerLaine Stump <laine@laine.org>
Wed, 13 Feb 2013 21:11:16 +0000 (16:11 -0500)
commitc0e3e685cd0b3f2e8abb137fcf57d5fddececb9a
tree0c9cfb8a0762d8eb2c84554a6f73fbfa9edc1b81
parent0345c7281b0da33245884ce568dca0b3483033a5
util: drop capabilities immediately after changing uid/gid of child

This is an interim measure to make sure everything still works in this
order. The next step will be to perform capabilities drop and
setuid/gid as a single operation (which is the only way to keep any
capabilities when switching to a non-root uid).
src/util/vircommand.c