Commit dc456e99 by Daniel Lezcano

fix setuid to attach, create and start

Fix the setuid bit root script. Signed-off-by: 's avatarDaniel Lezcano <dlezcano@fr.ibm.com>
parent 5da9e545
...@@ -60,6 +60,7 @@ lxc_setcaps() ...@@ -60,6 +60,7 @@ lxc_setcaps()
lxc_dropcaps() lxc_dropcaps()
{ {
setcap -r @BINDIR@/lxc-attach
setcap -r @BINDIR@/lxc-create setcap -r @BINDIR@/lxc-create
setcap -r @BINDIR@/lxc-execute setcap -r @BINDIR@/lxc-execute
setcap -r @BINDIR@/lxc-start setcap -r @BINDIR@/lxc-start
......
...@@ -41,7 +41,10 @@ setuid() ...@@ -41,7 +41,10 @@ setuid()
lxc_setuid() lxc_setuid()
{ {
setuid @BINDIR@/lxc-attach
setuid @BINDIR@/lxc-create
setuid @BINDIR@/lxc-execute setuid @BINDIR@/lxc-execute
setuid @BINDIR@/lxc-start
setuid @BINDIR@/lxc-restart setuid @BINDIR@/lxc-restart
setuid @BINDIR@/lxc-unshare setuid @BINDIR@/lxc-unshare
setuid @BINDIR@/lxc-netstat setuid @BINDIR@/lxc-netstat
...@@ -54,12 +57,16 @@ lxc_setuid() ...@@ -54,12 +57,16 @@ lxc_setuid()
lxc_dropuid() lxc_dropuid()
{ {
setuid -r @BINDIR@/lxc-attach
setuid -r @BINDIR@/lxc-create
setuid -r @BINDIR@/lxc-execute setuid -r @BINDIR@/lxc-execute
setuid -r @BINDIR@/lxc-start
setuid -r @BINDIR@/lxc-restart setuid -r @BINDIR@/lxc-restart
setuid -r @BINDIR@/lxc-unshare setuid -r @BINDIR@/lxc-unshare
setuid -r @BINDIR@/lxc-netstat setuid -r @BINDIR@/lxc-netstat
setuid -r @BINDIR@/lxc-checkpoint setuid -r @BINDIR@/lxc-checkpoint
setuid -r @LXCINITDIR@/lxc-init setuid -r @LXCINITDIR@/lxc-init
chmod 0755 @LXCPATH@ chmod 0755 @LXCPATH@
} }
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment