On 2022-06-13 22:45, Michael Tokarev wrote:
Is it sufficient to usedpkg-statoverride --add root root 04755 /usr/lib/qemu/qemu-bridge-helper to fix this on a particular system?
I tested this and found: 1. This does persist across a reinstallation of qemu-system-common. 2. This does not apply immediately. I suggest instead: sudo dpkg-statoverride --update --add root root 04755 /usr/lib/qemu/qemu-bridge-helper That will immediately change the mode of the existing file. I also tested granting CAP_NET_ADMIN via: sudo setcap cap_net_admin=ep /usr/lib/qemu/qemu-bridge-helper This works as well, but I don't see any way to make it persist across package reinstallation. Some research indicates this must be done by post-install script. https://superuser.com/questions/1606800/how-can-capabilities-be-set-for-a-file-across-upgrades-in-dpkg-like-for-permissi https://serverfault.com/questions/784426/preserve-linux-capabilities-in-debian-package Thanks, Corey
