internet/ansible-freeipa
4
0
Fork 0
mirror of https://github.com/freeipa/ansible-freeipa.git synced 2026-07-31 11:54:47 +00:00
Code Issues Projects Releases Wiki Activity

Merge pull request #1351 from t-woerner/infra_image_start_debug

Browse Source 
infra/image/shdefaults: Add SYS_PTRACE to CAP_DEFAULTS
This commit is contained in:
Rafael Guterres Jeffman
2025-04-17 11:53:02 -03:00
committed by GitHub
parent 86701caf8b 638422e113
commit 7245339934
2 changed files with 4 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
infra/image/shcontainer
View File

@@ -4,6 +4,7 @@
SCRIPTDIR="$(dirname -- "$(readlink -f "${BASH_SOURCE[0]}")")" SCRIPTDIR="$(dirname -- "$(readlink -f "${BASH_SOURCE[0]}")")"
TOPDIR="$(readlink -f "${SCRIPTDIR}/../..")" TOPDIR="$(readlink -f "${SCRIPTDIR}/../..")"
# shellcheck disable=SC1091
. "${SCRIPTDIR}/shdefaults" . "${SCRIPTDIR}/shdefaults"
# shellcheck disable=SC1091 # shellcheck disable=SC1091
@@ -15,7 +16,8 @@ container_create() {
shift 2 shift 2
declare -a extra_opts declare -a extra_opts
readarray -t extra_opts < \ readarray -t extra_opts < \
<(sed -e "s/-/--cap-drop=/g" -e "s/+/--cap-add=/g" <<< "${CAP_DEFAULTS[@]}") <(sed -e "s/-/--cap-drop=/g" -e "s/+/--cap-add=/g" \
<<< "$(printf '%s\n' "${CAP_DEFAULTS[@]}")")
for opt in "$@" for opt in "$@"
do do
[ -z "${opt}" ] && continue [ -z "${opt}" ] && continue

1
infra/image/shdefaults
View File

@@ -5,4 +5,5 @@
# Use +CAP to add the capability and -CAP to drop the capability. # Use +CAP to add the capability and -CAP to drop the capability.
CAP_DEFAULTS=( CAP_DEFAULTS=(
"+DAC_READ_SEARCH" # Required for SSSD "+DAC_READ_SEARCH" # Required for SSSD
"+SYS_PTRACE" # Required for debugging
) )