Blame 0002-daemon-main-do-not-create-run-icecc-by-ourselves.patch
|
 |
e140ed7 |
From 0ca327dd48e5c9b7c1c26529cdc86e35c5eb30e3 Mon Sep 17 00:00:00 2001
|
|
|
48d39d8 |
From: Michal Schmidt <mschmidt@redhat.com>
|
|
|
48d39d8 |
Date: Thu, 29 Aug 2013 18:12:02 +0200
|
|
|
3e9b2a5 |
Subject: [PATCH 2/4] daemon/main: do not create /run/icecc by ourselves
|
|
|
48d39d8 |
|
|
|
48d39d8 |
In order to be able to restrict the daemon's SELinux policy even more,
|
|
|
48d39d8 |
let's rely on tmpfiles.d to create the /run/icecc directory for us
|
|
|
48d39d8 |
instead of creating it from the daemon.
|
|
|
48d39d8 |
---
|
|
|
48d39d8 |
daemon/main.cpp | 4 ----
|
|
|
48d39d8 |
1 file changed, 4 deletions(-)
|
|
|
48d39d8 |
|
|
|
48d39d8 |
diff --git a/daemon/main.cpp b/daemon/main.cpp
|
|
|
e140ed7 |
index 9fe151a275..3119555f6d 100644
|
|
|
48d39d8 |
--- a/daemon/main.cpp
|
|
|
48d39d8 |
+++ b/daemon/main.cpp
|
|
|
e140ed7 |
@@ -2437,10 +2437,6 @@ int main(int argc, char **argv)
|
|
|
48d39d8 |
logfile = "/var/log/icecc/iceccd.log";
|
|
|
48d39d8 |
}
|
|
|
48d39d8 |
|
|
|
c61b150 |
- mkdir("/var/run/icecc", S_IRWXU | S_IRGRP | S_IXGRP | S_IROTH | S_IXOTH);
|
|
|
c61b150 |
- chmod("/var/run/icecc", S_IRWXU | S_IRGRP | S_IXGRP | S_IROTH | S_IXOTH);
|
|
|
d711b60 |
- ignore_result(chown("/var/run/icecc", d.user_uid, d.user_gid));
|
|
|
48d39d8 |
-
|
|
|
48d39d8 |
#ifdef HAVE_LIBCAP_NG
|
|
|
48d39d8 |
capng_clear(CAPNG_SELECT_BOTH);
|
|
|
c61b150 |
capng_update(CAPNG_ADD, (capng_type_t)(CAPNG_EFFECTIVE | CAPNG_PERMITTED), CAP_SYS_CHROOT);
|
|
|
48d39d8 |
--
|
|
|
e140ed7 |
2.21.0
|
|
|
48d39d8 |
|