From: Michael Tremer <michael.tremer@ipfire.org>
Date: Sat, 18 Mar 2023 12:50:08 +0000 (+0000)
Subject: jail: Allow setting file capabilities in the jail
X-Git-Tag: 0.9.29~251
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=a5149a294f8d2cee7bba78557ef1016638bee75a;p=pakfire.git

jail: Allow setting file capabilities in the jail

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
---

diff --git a/src/libpakfire/jail.c b/src/libpakfire/jail.c
index c81c169ae..c00be6d3e 100644
--- a/src/libpakfire/jail.c
+++ b/src/libpakfire/jail.c
@@ -970,9 +970,6 @@ static int pakfire_jail_drop_capabilities(struct pakfire_jail* jail) {
 		// Deny creating any special devices
 		CAP_MKNOD,
 
-		// Deny setting any capabilities
-		CAP_SETFCAP,
-
 		// Deny reading from syslog
 		CAP_SYSLOG,