 Tobias Brunner
|
cfdd23b967
|
capabilities: Proper error handling when reading groups
|
2013-07-24 10:54:26 +02:00 |
|
|
Tobias Brunner
|
027676f750
|
capabilities: Add function to check if a capability is held, without keeping it
This can be useful if capabilities are not required anymore after
dropping privileges.
|
2013-07-18 15:25:35 +02:00 |
|
|
Tobias Brunner
|
ac2ffde4ae
|
capabilities: Return effective UID/GID if user did not configure anything
|
2013-06-25 17:16:33 +02:00 |
|
|
Tobias Brunner
|
5e80e387bd
|
capabilities: Report effective UID/GID after dropping capabilities
|
2013-06-25 17:16:33 +02:00 |
|
|
Tobias Brunner
|
1937538440
|
capabilities: Handle CAP_CHOWN specially as it might not be required
|
2013-06-25 17:16:33 +02:00 |
|
|
Tobias Brunner
|
9c354c659f
|
capabilities: Check effective UID as fallback if capabilities are not supported
|
2013-06-25 17:16:33 +02:00 |
|
|
Tobias Brunner
|
2e21bac19a
|
capabilities: Ensure required capabilities are actually held by the process/user
|
2013-06-25 17:16:32 +02:00 |
|
|
Martin Willi
|
e8b2ce1e72
|
capabilities: leak-detective using dlsym() does not need CAP_SYS_NICE anymore
|
2013-05-15 17:20:47 +02:00 |
|
|
Martin Willi
|
b1bd63547b
|
capabilities: initialize supplementary groups only when doing a setuid()
|
2013-05-15 17:20:47 +02:00 |
|
|
Martin Willi
|
53fcc70acc
|
When running with an unprivileged user, initialize supplementary groups
|
2013-03-01 11:27:01 +01:00 |
|
|
Tobias Brunner
|
f05b427265
|
Moved debug.[ch] to utils folder
|
2012-10-24 16:00:51 +02:00 |
|
|
Tobias Brunner
|
ee7b7de18f
|
getpwnam_r and getgrnam_r are not supported by the Android NDK
|
2012-07-09 17:52:01 +02:00 |
|
|
Martin Willi
|
0619ddfaa4
|
Refactored heavily #ifdefd capability code to its own libstrongswan class
|
2012-07-04 11:01:40 +02:00 |
|