SymbX/systemd
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

nspawn: introduce --capability=all for retaining all capabilities

Browse Source
This commit is contained in:
Lennart Poettering
2014-02-13 02:45:11 +01:00
parent 89fffa2735
commit 39ed67d146
2 changed files with 21 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/nspawn/nspawn.c
+16 -12
View File
@@ -300,25 +300,29 @@ static int parse_argv(int argc, char *argv[]) {
size_t length;
FOREACH_WORD_SEPARATOR(word, length, optarg, ",", state) {
_cleanup_free_ char *t;
cap_value_t cap;
char *t;
t = strndup(word, length);
if (!t)
return log_oom();
if (cap_from_name(t, &cap) < 0) {
log_error("Failed to parse capability %s.", t);
free(t);
return -EINVAL;
if (streq(t, "all")) {
if (c == ARG_CAPABILITY)
arg_retain = (uint64_t) -1;
else
arg_retain = 0;
} else {
if (cap_from_name(t, &cap) < 0) {
log_error("Failed to parse capability %s.", t);
return -EINVAL;
}
if (c == ARG_CAPABILITY)
arg_retain |= 1ULL << (uint64_t) cap;
else
arg_retain &= ~(1ULL << (uint64_t) cap);
}
free(t);
if (c == ARG_CAPABILITY)
arg_retain |= 1ULL << (uint64_t) cap;
else
arg_retain &= ~(1ULL << (uint64_t) cap);
}
break;