From 79e5edc1a3187ef63bed80fe4ecb05a898b68f00 Mon Sep 17 00:00:00 2001 From: LinkTed Date: Mon, 3 Jan 2022 17:41:57 +0200 Subject: capabilities: Add support for securebits flags This adds securebits flags for start-stop-daemon and supervise-daemon by adding --secbits option. As a result, the user can specify securebits the program should run with. see capabilities(7) --- man/start-stop-daemon.8 | 4 ++++ man/supervise-daemon.8 | 4 ++++ 2 files changed, 8 insertions(+) (limited to 'man') diff --git a/man/start-stop-daemon.8 b/man/start-stop-daemon.8 index 990e9097..aedbd0cb 100644 --- a/man/start-stop-daemon.8 +++ b/man/start-stop-daemon.8 @@ -164,6 +164,10 @@ log it or send it to another location. .It Fl -capabilities Ar cap-list Start the daemon with the listed inheritable, ambient and bounding capabilities. The format is the same as in cap_iab(3). +.It Fl -secbits Ar sec-bits +Set the security-bits for the program. +The numeric value of the security-bits can be found in header file. +The format is the same as in strtoul(3). .It Fl w , -wait Ar milliseconds Wait .Ar milliseconds diff --git a/man/supervise-daemon.8 b/man/supervise-daemon.8 index 9ff6ff66..799a791a 100644 --- a/man/supervise-daemon.8 +++ b/man/supervise-daemon.8 @@ -161,6 +161,10 @@ but with the standard error output. .It Fl -capabilities Ar cap-list Start the daemon with the listed inheritable, ambient and bounding capabilities. The format is the same as in cap_iab(3). +.It Fl -secbits Ar sec-bits +Set the security-bits for the program. +The numeric value of the security-bits can be found in header file. +The format is the same as in strtoul(3). .El .Sh ENVIRONMENT .Va SSD_IONICELEVEL -- cgit v1.2.3