How does one make an RPM which sets the POSIX capabilities of a file? If I try doing rpmbuild as a non-root user then I get an error when my makefile's install hooks try to run setcap, but if I don't run setcap how will rpmbuild copy the capabilities? There doesn't seem to be any way to set the capability from within the RPM spec file.
Making an RPM which sets POSIX files capabilities
2.5k Views Asked by Matthew Cline At
1
There are 1 best solutions below
Related Questions in LINUX
- How do I recursively find and replace only in files named index.php on Linux webserver?
- passing text with \n as one argument in shell
- kernel module does not print packet info
- How to send ESC/POS commands to thermal printer in Linux
- (x64 Nasm) Writeline function on Linux
- How do I set the Hive user to something different than the Spark user from within a Spark program?
- Default priority of thread with SCHED_FIFO
- Calling a python function with options from shell script
- How to split a directory into parts without compressing or archiving?
- Cross compile simple standard C program on Linux for Mac
- How to offload NAPI poll function to workqueue
- python netifaces - How to get currently used network interface
- Unexpected output from function
- mingw-64 conflicting declarations when cross-compiling
- Different behavior of async with Visual Studio 2013(Windows8.1) and GCC 4.9(Ubuntu14.10)
Related Questions in RPM
- Arduino RPM Detection
- RPM spec files with rpmbuild can have errors
- RPM conflicts with itself
- Why is rpmbuild installing package?
- Removing RPM Packages
- RPM to invoke browser post installation
- find rpm name from a executable
- CentOS6 - Backup all RPMs and installed programs
- PEP-Proxy-Steelskin Log configuration
- YUM error: dbiOpen: dbapi 1 not available
- RPM package spec localization
- Generate rpm with redline (java) no .spec file
- Custom use of RPM - how to organize it?
- Creating deb or rpm with setuptools – data_files
- How to sign rpm packages using digital signatures?
Related Questions in RPM-SPEC
- RPM spec files with rpmbuild can have errors
- RPM to invoke browser post installation
- nss-3.14.1-3.fc16.src.rpm build fails with error: test suite returned failure(s)
- RPM package spec localization
- Is it safe to verify the RPM that has just been installed from a %posttrans?
- Creating an RPM package
- I want to remake rpm package without srpm
- Marking files as config files in CPack
- Making an RPM which sets POSIX files capabilities
- RPM Build - Permission Denied
- Add extra file into the rpm building process
- Yum does not resolve dependencies after a rpm -ivh installation
- rpmbuild :error: Could not generate output filename for package myApp: unknown tag
- Unable to install kernel driver rpm during %post section kickstart RHEL7
- Different versions of rpmbuild list different dependencies
Related Questions in LINUX-CAPABILITIES
- Newer versions of docker have --cap-add, what CAP's can be added?
- Making an RPM which sets POSIX files capabilities
- Developmental testing of programs using Linux's POSIX capabilities
- Why is CapEff all zeros in /proc/$PID/status
- Run ifup and ifdown with sudo using linux capability
- How unshare makes possible to use chroot without real root?
- why setuid fails after capset is used?
- Attempt to elevate to chroot capabilities but fails, WHY?
- Using setcap [capabilities] in cross-compiled platform
- /usr/bin/passwd and the CAP_CHOWN capability
- How do I add Linux capabilities SYS_NICE and DAC_READ_SEARCH to container in AWS Fargate?
- Allow non-root user of container to execute binaries that need capabilities
- Integrate granting of capabilities into the build process?
- Trying to perform setcap from Qt program
- Why is requiring that all capabilities be dropped in a Kubernetes PodSecurityPolicy redundant with non-root + disallow privilege escalation?
Trending Questions
- UIImageView Frame Doesn't Reflect Constraints
- Is it possible to use adb commands to click on a view by finding its ID?
- How to create a new web character symbol recognizable by html/javascript?
- Why isn't my CSS3 animation smooth in Google Chrome (but very smooth on other browsers)?
- Heap Gives Page Fault
- Connect ffmpeg to Visual Studio 2008
- Both Object- and ValueAnimator jumps when Duration is set above API LvL 24
- How to avoid default initialization of objects in std::vector?
- second argument of the command line arguments in a format other than char** argv or char* argv[]
- How to improve efficiency of algorithm which generates next lexicographic permutation?
- Navigating to the another actvity app getting crash in android
- How to read the particular message format in android and store in sqlite database?
- Resetting inventory status after order is cancelled
- Efficiently compute powers of X in SSE/AVX
- Insert into an external database using ajax and php : POST 500 (Internal Server Error)
Popular Questions
- How do I undo the most recent local commits in Git?
- How can I remove a specific item from an array in JavaScript?
- How do I delete a Git branch locally and remotely?
- Find all files containing a specific text (string) on Linux?
- How do I revert a Git repository to a previous commit?
- How do I create an HTML button that acts like a link?
- How do I check out a remote Git branch?
- How do I force "git pull" to overwrite local files?
- How do I list all files of a directory?
- How to check whether a string contains a substring in JavaScript?
- How do I redirect to another webpage?
- How can I iterate over rows in a Pandas DataFrame?
- How do I convert a String to an int in Java?
- Does Python have a string 'contains' substring method?
- How do I check if a string contains a specific word?
There is a spec file macro for setting capabilities,
%caps; for some reason this seems to be mainly documented in the release notes and changelogs, so it took a while for me to find it.It's used like this in the spec file:
To get
make installto usesetcaponly when invoked by root, you can do something like this: