strip: Apply hack to preserve capabilities

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

diff --git a/src/scripts/strip b/src/scripts/strip
index 6fa9aaf07f216a3edd1dde76c96f4cbc8be33c94..3d82beb5a066514b5ed7017dc65c0ed3974c7e74 100644 (file)
--- a/src/scripts/strip
+++ b/src/scripts/strip
@@ -80,6 +80,10 @@ process_file() {
                fi
        fi
 
+       # Fetch any capabilities
+       local capabilities="$(getfattr --no-dereference --name="security.capability" \
+               --absolute-names --dump "${file}" 2>/dev/null)"
+
        # Extract sources
        if ! extract_sources "${file}"; then
                error "Could not extract sources from ${file}"
@@ -143,6 +147,11 @@ process_file() {
        cat "${tempfile}" > "${file}"
        rm -f "${tempfile}"
 
+       # Restore capabilities
+       if [ -n "${capabilities}" ]; then
+               setfattr --no-dereference --restore=<(echo "${capabilities}")
+       fi
+
        return 0
 }