jcgruenhage/void-packages

Fork 0

Commit graph

Author	SHA1	Message	Date
Juan RP	88cd3ff7eb	xbps-src: improved xbps-src-chroot-capmount helper. The new code now has some security enhancements that only allows to bind mount a filesystem when the user executing the process owns the target directory and has read/write permissions on it.	2011-07-06 17:00:59 +02:00
Juan RP	e3dc3e3066	Added native utilities to mount/umount/chroot via capabilities(7). Three new helpers will now be installed into ${libexecdir}: - xbps-src-capchroot needs to have set CAP_SYS_CHROOT ep. - xbps-src-chroot-cap{,u}mount: needs to have set CAP_SYS_ADMIN ep. That means that libcap and setcap(8) are now required to install xbps-src and use it as normal user. --HG-- extra : convert_revision : 586d6526079e085f86bf3e393459d429f6f0ef99	2010-04-26 14:15:49 +02:00

Author

SHA1

Message

Date

Juan RP

88cd3ff7eb

xbps-src: improved xbps-src-chroot-capmount helper.

The new code now has some security enhancements that only allows
to bind mount a filesystem when the user executing the process
owns the target directory and has read/write permissions on it.

2011-07-06 17:00:59 +02:00

Juan RP

e3dc3e3066

Added native utilities to mount/umount/chroot via capabilities(7).

Three new helpers will now be installed into ${libexecdir}:
 - xbps-src-capchroot needs to have set CAP_SYS_CHROOT ep.
 - xbps-src-chroot-cap{,u}mount: needs to have set CAP_SYS_ADMIN ep.

That means that libcap and setcap(8) are now required to install
xbps-src and use it as normal user.

--HG--
extra : convert_revision : 586d6526079e085f86bf3e393459d429f6f0ef99

2010-04-26 14:15:49 +02:00

2 commits