On 11 May 2018 19:05:34 BST, Jon DeVree <n...@vault24.org> wrote: >On Fri, May 11, 2018 at 10:37:32 -0400, Jon DeVree wrote: >> >> Virtualbox works with the iproute2_4.16.0-3~git1_amd64.deb with the >> additional 'setcap -r /bin/ip' fix described by Mantas. >> > >I played around with this a little more. Its actually the >'setcap -r /bin/ls' which fixes virtualbox. > >Both iproute2_4.16.0-3~git1_amd64.deb and iproute2_4.16.0-2_amd64.deb >work with virtualbox when setuid. Neither works with virtualbox when >its >not setuid until the 'setcap -r /bin/ip' is run.
Right, with setuid ip already skips dropping caps, so the latest patch won't change anything. It's necessary only with the ambient caps, which that VPN software uses. The next upload will include both. Kind regards, Luca Boccassi
signature.asc
Description: PGP signature
