Allow build without sys/capability.h

There is no guard clause around a reference to CAP_EFFECTIVE and CAP_SETGID, causing compilation to fail if sys/capability.h is not available. Signed-off-by: Brett Neumeier <brett@neumeier.us>

Allow build without sys/capability.h
00a7a301 · Brett Neumeier · Stéphane Graber · 44050f3e · 00a7a301
Unverified Commit 00a7a301 authored Jan 29, 2017 by Brett Neumeier Committed by Stéphane Graber Mar 20, 2017
Show whitespace changes
Inline Side-by-side

Showing with 4 additions and 0 deletions

start.c src/lxc/start.c +4 -0

No files found.
--- a/src/lxc/start.c
+++ b/src/lxc/start.c
@@ -873,7 +873,11 @@ static int do_start(void *data)
 		 * further above. Only drop groups if we can, so ensure that we
 		 * have necessary privilege.
 		 */
+		#if HAVE_SYS_CAPABILITY_H
 		have_cap_setgid = lxc_cap_is_set(CAP_SETGID, CAP_EFFECTIVE);
+		#else
+		have_cap_setgid = false;
+		#endif
 		if (lxc_list_empty(&handler->conf->id_map) && have_cap_setgid) {
 			if (lxc_setgroups(0, NULL) < 0)
 				goto out_warn_father;