fix setuid to attach, create and start

Fix the setuid bit root script. Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>

fix setuid to attach, create and start
dc456e99 · Daniel Lezcano · 5da9e545 · dc456e99 · dc456e99
Commit dc456e99 authored Jul 23, 2010 by Daniel Lezcano
Hide whitespace changes
Inline Side-by-side

Showing with 8 additions and 0 deletions

lxc-setcap.in src/lxc/lxc-setcap.in +1 -0

lxc-setuid.in src/lxc/lxc-setuid.in +7 -0

No files found.
--- a/src/lxc/lxc-setcap.in
+++ b/src/lxc/lxc-setcap.in
@@ -60,6 +60,7 @@ lxc_setcaps()

 lxc_dropcaps()
 {
+    setcap -r @BINDIR@/lxc-attach
    setcap -r @BINDIR@/lxc-create
    setcap -r @BINDIR@/lxc-execute
    setcap -r @BINDIR@/lxc-start

--- a/src/lxc/lxc-setuid.in
+++ b/src/lxc/lxc-setuid.in
@@ -41,7 +41,10 @@ setuid()

 lxc_setuid()
 {
+    setuid @BINDIR@/lxc-attach
+    setuid @BINDIR@/lxc-create
    setuid @BINDIR@/lxc-execute
+    setuid @BINDIR@/lxc-start
    setuid @BINDIR@/lxc-restart
    setuid @BINDIR@/lxc-unshare
    setuid @BINDIR@/lxc-netstat
@@ -54,12 +57,16 @@ lxc_setuid()

 lxc_dropuid()
 {
+    setuid -r @BINDIR@/lxc-attach
+    setuid -r @BINDIR@/lxc-create
    setuid -r @BINDIR@/lxc-execute
+    setuid -r @BINDIR@/lxc-start
    setuid -r @BINDIR@/lxc-restart
    setuid -r @BINDIR@/lxc-unshare
    setuid -r @BINDIR@/lxc-netstat
    setuid -r @BINDIR@/lxc-checkpoint
    setuid -r @LXCINITDIR@/lxc-init
+
    chmod 0755 @LXCPATH@
 }