File mtr-0.82-capabilities.patch of Package mtr

Overview Repositories Revisions Requests Users Attributes Meta

File mtr-0.82-capabilities.patch of Package mtr (Revision 5dd3f2162e6d09c4e95b86a18a119556)

Currently displaying revision 5dd3f2162e6d09c4e95b86a18a119556 , Show latest

---
 configure.ac |    4 ++++
 mtr.c        |   15 +++++++++++++++
 2 files changed, 19 insertions(+)

Index: mtr-0.85/configure.ac
===================================================================
--- mtr-0.85.orig/configure.ac
+++ mtr-0.85/configure.ac
@@ -26,6 +26,10 @@ AC_CHECK_HEADERS(socket.h sys/socket.h s
 AC_CHECK_LIB(termcap, tgetent)
 AC_CHECK_LIB(tinfo, tgetent)
 
+AC_CHECK_LIB(cap, cap_init,
+	AC_DEFINE(HAVE_CAPABILITIES, 1, capability support)
+	LIBS="$LIBS -lcap", AC_MSG_WARN(No capability support available.))
+
 AC_CHECK_FUNC(initscr, , 
   AC_CHECK_LIB(ncurses, initscr, , 
     AC_CHECK_LIB(curses, initscr, , 
Index: mtr-0.85/mtr.c
===================================================================
--- mtr-0.85.orig/mtr.c
+++ mtr-0.85/mtr.c
@@ -46,6 +46,9 @@
 #endif
 #include "version.h"
 
+#ifdef HAVE_CAPABILITIES
+#include <sys/capability.h>
+#endif
 
 #ifdef ENABLE_IPV6
 #define DEFAULT_AF AF_UNSPEC
@@ -524,6 +527,18 @@ int main(int argc, char **argv)
     exit( EXIT_FAILURE );
   }
 
+   /* ported from ping */
+#ifdef HAVE_CAPABILITIES
+   {
+	cap_t caps = cap_init();
+	if (cap_set_proc(caps) < 0) {
+		fprintf (stderr, "mtr: Unable to drop capabilities.\n");
+		exit(1);
+	}
+	cap_free(caps);
+   }
+#endif
+
   /*  Now drop to user permissions  */
   if (setgid(getgid()) || setuid(getuid())) {
     fprintf (stderr, "mtr: Unable to drop permissions.\n");

Places

File mtr-0.82-capabilities.patch of Package mtr (Revision 5dd3f2162e6d09c4e95b86a18a119556)

Places