From 79e5edc1a3187ef63bed80fe4ecb05a898b68f00 Mon Sep 17 00:00:00 2001 From: LinkTed Date: Mon, 3 Jan 2022 17:41:57 +0200 Subject: capabilities: Add support for securebits flags This adds securebits flags for start-stop-daemon and supervise-daemon by adding --secbits option. As a result, the user can specify securebits the program should run with. see capabilities(7) --- sh/start-stop-daemon.sh | 1 + sh/supervise-daemon.sh | 1 + 2 files changed, 2 insertions(+) (limited to 'sh') diff --git a/sh/start-stop-daemon.sh b/sh/start-stop-daemon.sh index 02a7cd84..bbb4da37 100644 --- a/sh/start-stop-daemon.sh +++ b/sh/start-stop-daemon.sh @@ -54,6 +54,7 @@ ssd_start() ${output_logger_arg} \ ${error_logger_arg} \ ${capabilities+--capabilities} "$capabilities" \ + ${secbits:+--secbits} "$secbits" \ ${procname:+--name} $procname \ ${pidfile:+--pidfile} $pidfile \ ${command_user+--user} $command_user \ diff --git a/sh/supervise-daemon.sh b/sh/supervise-daemon.sh index be4c9d71..39fe5727 100644 --- a/sh/supervise-daemon.sh +++ b/sh/supervise-daemon.sh @@ -37,6 +37,7 @@ supervise_start() ${healthcheck_delay:+--healthcheck-delay} $healthcheck_delay \ ${healthcheck_timer:+--healthcheck-timer} $healthcheck_timer \ ${capabilities+--capabilities} "$capabilities" \ + ${secbits:+--secbits} "$secbits" \ ${command_user+--user} $command_user \ ${umask+--umask} $umask \ ${supervise_daemon_args:-${start_stop_daemon_args}} \ -- cgit v1.2.3