Rather than listing the unsafe capabilities, assume they're all unsafe unless
authorDaniel Hokka Zakrisson <daniel@hozac.com>
Mon, 27 Oct 2008 22:54:35 +0000 (22:54 +0000)
committerDaniel Hokka Zakrisson <daniel@hozac.com>
Mon, 27 Oct 2008 22:54:35 +0000 (22:54 +0000)
they're in this list.

git-svn-id: http://svn.linux-vserver.org/svn/util-vserver/trunk@2796 94cd875c-1c1d-0410-91d2-eb244daf1a30

lib/getinsecurebcaps.c

index b6d0acc..fc81685 100644 (file)
 uint_least64_t
 vc_get_insecurebcaps()
 {
-  return ( (1<<VC_CAP_LINUX_IMMUTABLE) | (1<<VC_CAP_NET_BROADCAST) |
-          (1<<VC_CAP_NET_ADMIN) | (1<<VC_CAP_NET_RAW) |
-          (1<<VC_CAP_IPC_LOCK) | (1<<VC_CAP_IPC_OWNER) |
-          (1<<VC_CAP_SYS_MODULE) | (1<<VC_CAP_SYS_RAWIO) |
-          (1<<VC_CAP_SYS_PACCT) | (1<<VC_CAP_SYS_ADMIN) |
-          (1<<VC_CAP_SYS_NICE) |
-          (1<<VC_CAP_SYS_RESOURCE) | (1<<VC_CAP_SYS_TIME) |
-          (1<<VC_CAP_MKNOD) | (1<<VC_CAP_AUDIT_CONTROL)
-          | ~(0x7fffffff)
+  return ~((1<<VC_CAP_CHOWN) | (1<<VC_CAP_DAC_OVERRIDE) |
+          (1<<VC_CAP_DAC_READ_SEARCH) | (1<<VC_CAP_FOWNER) |
+          (1<<VC_CAP_FSETID) | (1<<VC_CAP_KILL) |
+          (1<<VC_CAP_SETGID) | (1<<VC_CAP_SETUID) |
+          (1<<VC_CAP_NET_BIND_SERVICE)
 
 #if defined(VC_ENABLE_API_COMPAT)
-          | (vc_isSupported(vcFEATURE_VSHELPER) ? 0 : (1<<VC_CAP_SYS_BOOT))
-          | (vc_isSupported(vcFEATURE_MIGRATE)  ? 0 : (1<<29)) // formerly QUOTACTL
+          | (vc_isSupported(vcFEATURE_VSHELPER) ? (1<<VC_CAP_SYS_BOOT) : 0)
+          | (vc_isSupported(vcFEATURE_MIGRATE)  ? (1<<VC_CAP_AUDIT_WRITE) : 0) // formerly QUOTACTL
 #endif
     );
 }