fix setuid to attach, create and start

Fix the setuid bit root script.

Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>

diff --git a/src/lxc/lxc-setcap.in b/src/lxc/lxc-setcap.in
index 23829eecd5a08b2fe3298a649eff9c1e531c512b..cc719b584aa1cba78ca00db99f8de388cc747b7d 100644 (file)
--- a/src/lxc/lxc-setcap.in
+++ b/src/lxc/lxc-setcap.in
@@ -60,6 +60,7 @@ lxc_setcaps()
 
 lxc_dropcaps()
 {
+    setcap -r @BINDIR@/lxc-attach
     setcap -r @BINDIR@/lxc-create
     setcap -r @BINDIR@/lxc-execute
     setcap -r @BINDIR@/lxc-start

diff --git a/src/lxc/lxc-setuid.in b/src/lxc/lxc-setuid.in
index d65ef1e5d4287e0555a3daa20d761939d90ecbac..86d7d4a52efec73f225904460fbaab56a0789857 100644 (file)
--- a/src/lxc/lxc-setuid.in
+++ b/src/lxc/lxc-setuid.in
@@ -41,7 +41,10 @@ setuid()
 
 lxc_setuid()
 {
+    setuid @BINDIR@/lxc-attach
+    setuid @BINDIR@/lxc-create
     setuid @BINDIR@/lxc-execute
+    setuid @BINDIR@/lxc-start
     setuid @BINDIR@/lxc-restart
     setuid @BINDIR@/lxc-unshare
     setuid @BINDIR@/lxc-netstat
@@ -54,12 +57,16 @@ lxc_setuid()
 
 lxc_dropuid()
 {
+    setuid -r @BINDIR@/lxc-attach
+    setuid -r @BINDIR@/lxc-create
     setuid -r @BINDIR@/lxc-execute
+    setuid -r @BINDIR@/lxc-start
     setuid -r @BINDIR@/lxc-restart
     setuid -r @BINDIR@/lxc-unshare
     setuid -r @BINDIR@/lxc-netstat
     setuid -r @BINDIR@/lxc-checkpoint
     setuid -r @LXCINITDIR@/lxc-init
+
     chmod 0755 @LXCPATH@
 }