import: we need CAP_DAC_OVERRIDE for untarring systems after all

2015-01-23 01:17:55 +01:00
parent d875aa8ce1
commit e026c242af
1 changed files with 2 additions and 1 deletions
@@ -471,7 +471,8 @@ int import_fork_tar(const char *path, pid_t *ret) {
                        (1ULL << CAP_FOWNER) |
                        (1ULL << CAP_FSETID) |
                        (1ULL << CAP_MKNOD) |
-                        (1ULL << CAP_SETFCAP);
+                        (1ULL << CAP_SETFCAP) |
+                        (1ULL << CAP_DAC_OVERRIDE);

                /* Child */