diff --git a/1_prune.sh b/1_prune.sh index 3594e1c..c540204 100755 --- a/1_prune.sh +++ b/1_prune.sh @@ -198,11 +198,13 @@ setcap cap_net_bind_service=ep ./usr/bin/rsh setcap cap_sys_admin=p $(realpath ./usr/bin/sunshine) # SSSD -if [ -f ${TREE}/etc/os-release ] && - [ $(cat ${TREE}/etc/os-release | grep VERSION_ID | grep 40) ]; then - echo "Detected Fedora version: 40" - echo "Not setting capabilities on sssd binaries for Fedora 40." +if [ -f ${TREE}/usr/etc/os-release ] && \ + [ $(cat ${TREE}/usr/etc/os-release | grep VERSION_ID | grep 40) ]; then + echo "Detected Fedora version 40." + echo "NOT setting capabilities on sssd binaries." else + echo "Detected Fedora version 41 or higher." + echo "Setting latest capabilities on sssd binaries." setcap cap_dac_read_search,cap_setgid,cap_setuid=p ./usr/libexec/sssd/krb5_child setcap cap_dac_read_search=p ./usr/libexec/sssd/ldap_child setcap cap_setgid,cap_setuid=p ./usr/libexec/sssd/selinux_child