Re: [PATCH 1/2] virSetUIDGIDWithCaps: Don't drop CAP_SETPCAP right away

2021-06-28 Thread Martin Kletzander
On Fri, Jun 25, 2021 at 09:22:55AM +0200, Michal Privoznik wrote: There are few cases where we execute a virCommand with all caps cleared (virCommandClearCaps()). For instance dnsmasqCapsRefreshInternal() does just that. This means, that after fork() and before exec() the virSetUIDGIDWithCaps()

[PATCH 1/2] virSetUIDGIDWithCaps: Don't drop CAP_SETPCAP right away

2021-06-25 Thread Michal Privoznik
There are few cases where we execute a virCommand with all caps cleared (virCommandClearCaps()). For instance dnsmasqCapsRefreshInternal() does just that. This means, that after fork() and before exec() the virSetUIDGIDWithCaps() is called. But since the caller did not want to change anything,