Join GitHub today
GitHub is home to over 20 million developers working together to host and review code, manage projects, and build software together.
libcap-ng support #7
Conversation
rbelem
added some commits
Dec 12, 2012
|
I don't know details about libcap, but it sounds good |
added a commit
that referenced
this pull request
Dec 16, 2012
coolo
merged commit cc6b9ec
into
icecc:master
Dec 16, 2012
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
rbelem commentedDec 12, 2012
This patch set is a attempt to make iceccd a more secure.
The first patch moves the socket and log to an icecc dir. The icecc user will be the owner, so iceccd, when running with regular user, will be able to create, read and write files.
The second patch just renames the variables from nobody to user.
The third one clean all root capabilities except the chroot using libcap-ng and ifdef everything related to changing user id, because the user was changed after the capabilities cleanup.