From 00be90b7c5ccafe590c14d6ba2d4d13f12fe958a Mon Sep 17 00:00:00 2001 From: Pawel Jakub Dawidek Date: Thu, 14 Nov 2013 23:18:32 +0000 Subject: [PATCH] The CAP_LINKAT, CAP_MKDIRAT, CAP_MKFIFOAT, CAP_MKNODAT, CAP_RENAMEAT, CAP_SYMLINKAT and CAP_UNLINKAT capability rights make no sense without the CAP_LOOKUP right, so include this rights. Sponsored by: The FreeBSD Foundation MFC after: 3 days --- sys/sys/capability.h | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/sys/sys/capability.h b/sys/sys/capability.h index ca1fbc2ea43..443bae8d46e 100644 --- a/sys/sys/capability.h +++ b/sys/sys/capability.h @@ -151,22 +151,22 @@ /* Allows for futimes(2) and futimesat(2). */ #define CAP_FUTIMESAT (CAP_FUTIMES | CAP_LOOKUP) /* Allows for linkat(2) and renameat(2) (destination directory descriptor). */ -#define CAP_LINKAT CAPRIGHT(0, 0x0000000000400000ULL) +#define CAP_LINKAT (CAP_LOOKUP | 0x0000000000400000ULL) /* Allows for mkdirat(2). */ -#define CAP_MKDIRAT CAPRIGHT(0, 0x0000000000800000ULL) +#define CAP_MKDIRAT (CAP_LOOKUP | 0x0000000000800000ULL) /* Allows for mkfifoat(2). */ -#define CAP_MKFIFOAT CAPRIGHT(0, 0x0000000001000000ULL) +#define CAP_MKFIFOAT (CAP_LOOKUP | 0x0000000001000000ULL) /* Allows for mknodat(2). */ -#define CAP_MKNODAT CAPRIGHT(0, 0x0000000002000000ULL) +#define CAP_MKNODAT (CAP_LOOKUP | 0x0000000002000000ULL) /* Allows for renameat(2). */ -#define CAP_RENAMEAT CAPRIGHT(0, 0x0000000004000000ULL) +#define CAP_RENAMEAT (CAP_LOOKUP | 0x0000000004000000ULL) /* Allows for symlinkat(2). */ -#define CAP_SYMLINKAT CAPRIGHT(0, 0x0000000008000000ULL) +#define CAP_SYMLINKAT (CAP_LOOKUP | 0x0000000008000000ULL) /* * Allows for unlinkat(2) and renameat(2) if destination object exists and * will be removed. */ -#define CAP_UNLINKAT CAPRIGHT(0, 0x0000000010000000ULL) +#define CAP_UNLINKAT (CAP_LOOKUP | 0x0000000010000000ULL) /* Extended attributes. */ /* Allows for extattr_delete_fd(2). */ -- 2.45.2