From 906c0766df2fec4bd32c316fd1b0d46fded5fc84 Mon Sep 17 00:00:00 2001 From: Scott Anderson Date: Tue, 28 Apr 2020 20:44:05 +1200 Subject: Remove libcap support This is simply a false sense of security, and is worse than just using setuid. CAP_SYS_ADMIN is an extremely serious capability that is effectively as powerful as root. It also required users to be in the input group, which allows any process to keylog the entire system. --- .builds/alpine.yml | 1 - .builds/archlinux.yml | 1 - .builds/freebsd.yml | 2 +- 3 files changed, 1 insertion(+), 3 deletions(-) (limited to '.builds') diff --git a/.builds/alpine.yml b/.builds/alpine.yml index 6ec7fe99..13221d25 100644 --- a/.builds/alpine.yml +++ b/.builds/alpine.yml @@ -2,7 +2,6 @@ image: alpine/edge packages: - eudev-dev - ffmpeg-dev - - libcap-dev - libinput-dev - libxkbcommon-dev - mesa-dev diff --git a/.builds/archlinux.yml b/.builds/archlinux.yml index 11f0baaf..b3b1a3c0 100644 --- a/.builds/archlinux.yml +++ b/.builds/archlinux.yml @@ -2,7 +2,6 @@ image: archlinux packages: - clang - ffmpeg - - libcap - libinput - libxkbcommon - mesa diff --git a/.builds/freebsd.yml b/.builds/freebsd.yml index 1934d8c7..a0dfc442 100644 --- a/.builds/freebsd.yml +++ b/.builds/freebsd.yml @@ -23,5 +23,5 @@ sources: tasks: - wlroots: | cd wlroots - meson build -Dauto_features=enabled -Dlogind=disabled -Dlibcap=disabled + meson build -Dauto_features=enabled -Dlogind=disabled ninja -C build -- cgit v1.2.3