- adjusted insecure caps for the added CAP_AUDIT* and removed
authorEnrico Scholz <enrico.scholz@informatik.tu-chemnitz.de>
Fri, 15 Jul 2005 18:59:55 +0000 (18:59 +0000)
committerEnrico Scholz <enrico.scholz@informatik.tu-chemnitz.de>
Fri, 15 Jul 2005 18:59:55 +0000 (18:59 +0000)
  CAP_QUOTACTL stuff
- assume every unknown capability as insecure

git-svn-id: http://svn.linux-vserver.org/svn/util-vserver/trunk@2154 94cd875c-1c1d-0410-91d2-eb244daf1a30

util-vserver/lib/getinsecurebcaps.c

index f6e61c1..b6d0acc 100644 (file)
@@ -32,10 +32,12 @@ vc_get_insecurebcaps()
           (1<<VC_CAP_SYS_PACCT) | (1<<VC_CAP_SYS_ADMIN) |
           (1<<VC_CAP_SYS_NICE) |
           (1<<VC_CAP_SYS_RESOURCE) | (1<<VC_CAP_SYS_TIME) |
-          (1<<VC_CAP_MKNOD) | (1<<VC_CAP_QUOTACTL)
+          (1<<VC_CAP_MKNOD) | (1<<VC_CAP_AUDIT_CONTROL)
+          | ~(0x7fffffff)
 
 #if defined(VC_ENABLE_API_COMPAT)
           | (vc_isSupported(vcFEATURE_VSHELPER) ? 0 : (1<<VC_CAP_SYS_BOOT))
+          | (vc_isSupported(vcFEATURE_MIGRATE)  ? 0 : (1<<29)) // formerly QUOTACTL
 #endif
     );
 }