iputils: make ping{,6} setuid rather than using CAP_NET_RAW.

The reason is that we can't preserve capabilities when making
the rootfs tarballs.
This commit is contained in:
Juan RP 2014-12-10 19:07:27 +01:00
parent 6a20a99cbb
commit 0efc3f574d
2 changed files with 5 additions and 12 deletions

View file

@ -1,9 +0,0 @@
case ${ACTION} in
post)
# Set required capability to ping{,6}.
for f in ping ping6; do
setcap cap_net_raw=ep usr/sbin/${f} 2>/dev/null || \
chmod +s usr/sbin/${f}
done
;;
esac

View file

@ -1,7 +1,7 @@
# Template file for 'iputils'
pkgname=iputils
version=20121221
revision=5
revision=6
patch_args="-Np1"
wrksrc="${pkgname}-s${version}"
makedepends="libressl-devel libcap-devel"
@ -20,7 +20,10 @@ do_build() {
}
do_install() {
for f in clockdiff arping ping ping6 rdisc tracepath tracepath6; do
for f in ping ping6; do
vinstall ${f} 4755 usr/sbin
done
for f in clockdiff arping rdisc tracepath tracepath6; do
vinstall ${f} 755 usr/sbin
done
for f in clockdiff arping ping rdisc tracepath; do
@ -29,5 +32,4 @@ do_install() {
cd ${DESTDIR}/usr/share/man/man8
ln -s ping.8 ping6.8
ln -s tracepath.8 tracepath6.8
}