Source: icecc
Version: icecc-1.0.1
Severity: normal
Tags: upstream patch
Hi,
currently iceccd will refuse to accept remote jobs if it's not run as root.
However, as far as I can tell it only requires the CAP_SYS_CHROOT
capability, which can be granted by running
setcap cap_sys_chroot+ep /usr/sbin/iceccd
(I also made the capability inheritable by using +eip; I'm not sure if
that's needed.)
iceccd already has the beginnings of capability support, so this is almost
sufficient; main.cpp needs a small patch so it doesn't unconditionally
disable remote jobs if it isn't running as root.
I'm attaching the patch (which also modifies debian/control to Build-Depends
on libcap-ng-dev).
Andras
--
What happens if you .ARC de Triomphe?
--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
