diff options
| author | Jeff Layton <jlayton@redhat.com> | 2010-04-01 15:28:57 -0400 |
|---|---|---|
| committer | Jeff Layton <jlayton@redhat.com> | 2010-04-01 15:28:57 -0400 |
| commit | da54228cd9e6fe144efcb2d6da87e3cbb5db5b4c (patch) | |
| tree | 637b63873a366cd5a98977cc4c75e3c05f6238e0 /Makefile.am | |
| parent | 810f7e4e0f2dbcbee0294d9b371071cb08268200 (diff) | |
| download | cifs-utils-da54228cd9e6fe144efcb2d6da87e3cbb5db5b4c.tar.gz cifs-utils-da54228cd9e6fe144efcb2d6da87e3cbb5db5b4c.tar.bz2 cifs-utils-da54228cd9e6fe144efcb2d6da87e3cbb5db5b4c.zip | |
mount.cifs: drop capabilities if libcap is available
Might as well be as safe as possible. Have child drop all capabilities,
and have the parent drop all but CAP_SYS_ADMIN (needed for mounting) and
CAP_DAC_OVERRIDE (needed in case mtab isn't writable by root). We might
even eventually consider being clever and dropping CAP_DAC_OVERRIDE when
root has access to the mtab.
Signed-off-by: Jeff Layton <jlayton@redhat.com>
Diffstat (limited to 'Makefile.am')
| -rw-r--r-- | Makefile.am | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/Makefile.am b/Makefile.am index fea8bdc..605206e 100644 --- a/Makefile.am +++ b/Makefile.am @@ -1,7 +1,10 @@ AM_CFLAGS = -Wall +ACLOCAL_AMFLAGS = -I aclocal + root_sbindir = "/sbin" root_sbin_PROGRAMS = mount.cifs mount_cifs_SOURCES = mount.cifs.c mtab.c util.c +mount_cifs_LDADD = @LIBCAP@ man_MANS = mount.cifs.8 |