Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Allow systemd-coredump getattr nsfs files and net_admin capability #700

Merged
merged 1 commit into from Apr 27, 2021

Conversation

zpytela
Copy link
Contributor

@zpytela zpytela commented Apr 26, 2021

The net_admin capability is required by systemd-coredump to increase
the send buffer in setsockopt(); refer to socket(7):

   SO_SNDBUFFORCE (since Linux 2.6.14)
          Using this socket option, a privileged (CAP_NET_ADMIN)  process  can  perform  the
          same task as SO_SNDBUF, but the wmem_max limit can be overridden.

Resolves: rhbz#1952163

The net_admin capability is required by systemd-coredump to increase
the send buffer in setsockopt(); refer to socket(7):

       SO_SNDBUFFORCE (since Linux 2.6.14)
              Using this socket option, a privileged (CAP_NET_ADMIN)  process  can  perform  the
              same task as SO_SNDBUF, but the wmem_max limit can be overridden.

Resolves: rhbz#1952163
@oturpe
Copy link

oturpe commented Apr 26, 2021

I tested this. Installing the rpms from actions fixes rhbz#1952163.

@zpytela
Copy link
Contributor Author

zpytela commented Apr 27, 2021

Merging, thanks for the confirmation.

@zpytela zpytela merged commit 7d70fa2 into fedora-selinux:rawhide Apr 27, 2021
@zpytela zpytela deleted the systemd-coredump-nsfs branch April 27, 2021 09:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants