From 6e214b261604c4ab1ffc244272443a587bb59927 Mon Sep 17 00:00:00 2001 From: LinkTed Date: Sun, 13 Jun 2021 19:26:24 +0200 Subject: capabilities: Add support for Linux capabilities(7) This adds capabilities for start-stop-daemon by adding --capabilities option. As a result, the user can specify the inheritable, ambient and bounding set by define capabilities in the service script. This fixes #314. --- man/start-stop-daemon.8 | 3 +++ man/supervise-daemon.8 | 3 +++ 2 files changed, 6 insertions(+) (limited to 'man') diff --git a/man/start-stop-daemon.8 b/man/start-stop-daemon.8 index e5aa4684..990e9097 100644 --- a/man/start-stop-daemon.8 +++ b/man/start-stop-daemon.8 @@ -161,6 +161,9 @@ Cmd must be an absolute pathname, but relative to the path optionally given with .Fl r , -chroot . This process must be prepared to accept input on stdin and be able to log it or send it to another location. +.It Fl -capabilities Ar cap-list +Start the daemon with the listed inheritable, ambient and bounding capabilities. +The format is the same as in cap_iab(3). .It Fl w , -wait Ar milliseconds Wait .Ar milliseconds diff --git a/man/supervise-daemon.8 b/man/supervise-daemon.8 index 69e2ff3f..9ff6ff66 100644 --- a/man/supervise-daemon.8 +++ b/man/supervise-daemon.8 @@ -158,6 +158,9 @@ The logfile can also be a named pipe. The same thing as .Fl 1 , -stdout but with the standard error output. +.It Fl -capabilities Ar cap-list +Start the daemon with the listed inheritable, ambient and bounding capabilities. +The format is the same as in cap_iab(3). .El .Sh ENVIRONMENT .Va SSD_IONICELEVEL -- cgit v1.2.3