From 6e214b261604c4ab1ffc244272443a587bb59927 Mon Sep 17 00:00:00 2001 From: LinkTed Date: Sun, 13 Jun 2021 19:26:24 +0200 Subject: capabilities: Add support for Linux capabilities(7) This adds capabilities for start-stop-daemon by adding --capabilities option. As a result, the user can specify the inheritable, ambient and bounding set by define capabilities in the service script. This fixes #314. --- sh/start-stop-daemon.sh | 1 + sh/supervise-daemon.sh | 1 + 2 files changed, 2 insertions(+) (limited to 'sh') diff --git a/sh/start-stop-daemon.sh b/sh/start-stop-daemon.sh index 95e62dce..02a7cd84 100644 --- a/sh/start-stop-daemon.sh +++ b/sh/start-stop-daemon.sh @@ -53,6 +53,7 @@ ssd_start() ${error_log+--stderr} $error_log \ ${output_logger_arg} \ ${error_logger_arg} \ + ${capabilities+--capabilities} "$capabilities" \ ${procname:+--name} $procname \ ${pidfile:+--pidfile} $pidfile \ ${command_user+--user} $command_user \ diff --git a/sh/supervise-daemon.sh b/sh/supervise-daemon.sh index a8541922..be4c9d71 100644 --- a/sh/supervise-daemon.sh +++ b/sh/supervise-daemon.sh @@ -36,6 +36,7 @@ supervise_start() ${respawn_period:+--respawn-period} $respawn_period \ ${healthcheck_delay:+--healthcheck-delay} $healthcheck_delay \ ${healthcheck_timer:+--healthcheck-timer} $healthcheck_timer \ + ${capabilities+--capabilities} "$capabilities" \ ${command_user+--user} $command_user \ ${umask+--umask} $umask \ ${supervise_daemon_args:-${start_stop_daemon_args}} \ -- cgit v1.2.3