diff options
| author | Randy MacLeod <Randy.MacLeod@windriver.com> | 2023-03-01 16:24:26 -0800 |
|---|---|---|
| committer | Khem Raj <raj.khem@gmail.com> | 2023-03-01 18:10:35 -0800 |
| commit | 35df0b606e1adc0db58dfe8088d0ba5cab2f3df6 (patch) | |
| tree | b74a1b7383f8601b6757ccbfa53c14ff5afeb811 /meta-python/recipes-devtools/python/python3-h5py/0001-setup.py-Fix-numpy-version.patch | |
| parent | 44cb4f1e121f5fb4d81399d14ccaa602e27c775b (diff) | |
| download | meta-openembedded-35df0b606e1adc0db58dfe8088d0ba5cab2f3df6.tar.gz | |
rsyslog: add disabled PACKAGECONFIG to drop capabilities
Add PACKAGECONFIG to enable dropping capabilities but leave it as disabled
to follow upstream and avoid a systemd issue described below.
rsyslog-8.2302 added a configure option to drop capabilities from
full to:
chown, dac_override, setgid, setuid, setpcap, net_bind_service,
net_admin, ipc_lock, sys_chroot, sys_admin, sys_resource, lease,
syslog, block_suspend
This works fine and passes ptests with sysvinit however
there is a bug when using systemd that breaks some tests:
https://github.com/rsyslog/rsyslog/issues/5091
Therefore only add a non-default PACKAGECONFIG option in keeping
with the rsyslog upstream.
One can install libcap-ng-bin to run pscap to see the capabilities.
Without this option the ptest result with systemd as init is:
Version | Passed | Failed | Skipped
8.2302 | 473 | 0 | 3
Signed-off-by: Randy MacLeod <Randy.MacLeod@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Diffstat (limited to 'meta-python/recipes-devtools/python/python3-h5py/0001-setup.py-Fix-numpy-version.patch')
0 files changed, 0 insertions, 0 deletions