SymbX/systemd
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

cap-list: add capability_set_{from_string,to_string_alloc}()

Browse Source
This commit is contained in:
Yu Watanabe
2017-08-07 23:25:11 +09:00
parent c23c34bcba
commit dd1f5bd0aa
4 changed files with 83 additions and 37 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/core/execute.c
+8 -14
View File
@@ -3610,25 +3610,19 @@ void exec_context_dump(ExecContext *c, FILE* f, const char *prefix) {
(c->secure_bits & 1<<SECURE_NOROOT_LOCKED) ? "noroot-locked" : "");
if (c->capability_bounding_set != CAP_ALL) {
unsigned long l;
fprintf(f, "%sCapabilityBoundingSet:", prefix);
_cleanup_free_ char *str = NULL;
for (l = 0; l <= cap_last_cap(); l++)
if (c->capability_bounding_set & (UINT64_C(1) << l))
fprintf(f, " %s", strna(capability_to_name(l)));
fputs("\n", f);
r = capability_set_to_string_alloc(c->capability_bounding_set, &str);
if (r >= 0)
fprintf(f, "%sCapabilityBoundingSet: %s\n", prefix, str);
}
if (c->capability_ambient_set != 0) {
unsigned long l;
fprintf(f, "%sAmbientCapabilities:", prefix);
_cleanup_free_ char *str = NULL;
for (l = 0; l <= cap_last_cap(); l++)
if (c->capability_ambient_set & (UINT64_C(1) << l))
fprintf(f, " %s", strna(capability_to_name(l)));
fputs("\n", f);
r = capability_set_to_string_alloc(c->capability_ambient_set, &str);
if (r >= 0)
fprintf(f, "%sAmbientCapabilities: %s\n", prefix, str);
}
if (c->user)