| commit | 8e553a415fafbc05c29ae998fb0710f1a988cf1c | [log] [tgz] |
|---|---|---|
| author | Nick Kralevich <nnk@google.com> | Wed Mar 25 17:42:37 2015 -0700 |
| committer | Nick Kralevich <nnk@google.com> | Wed Mar 25 17:42:37 2015 -0700 |
| tree | 79c07a335858e563d8cfa155610b7488a81e1ba5 | |
| parent | 21186a1fc3019f44ce43260c15c7510a7d80004c [diff] |
runas: don't allow capabilities other than setuid/setgid Add a compile time assertion that capabilities other than setuid and setgid are never granted to run-as. This is a compile time assertion only. No new capabilities are granted or removed. Change-Id: Ie86d651b539cdfb6f3eaafef0d5d3b716610a220