Re: [Openvpn-devel] I made a patch that prevents POSIX capabilities from disappearing during UID downgrade.

2011-04-12 Thread crocket
Forget about this patch. The bug section in "man mlock" tells me that it's a kernel bug. It seems prctl can't remove the bug. On Tue, Apr 12, 2011 at 5:23 AM, crocket wrote: > diff -Naur a/init.c b/init.c > --- a/init.c    2010-11-05 04:29:02.0 +0900 > +++

Re: [Openvpn-devel] I made a patch that prevents POSIX capabilities from disappearing during UID downgrade.

2011-04-11 Thread crocket
pabilities}" = "yes" && > AC_DEFINE([ENABLE_CAPABILITIES], [1], [enable Linux capabilities]) > --- > > Then in source you test for: > #ifdef ENABLE_CAPABILITIES > > Alon. > > > On Tue, Apr 12, 2011 at 12:03 AM, crocket wrote: >> How do I enab

Re: [Openvpn-devel] I made a patch that prevents POSIX capabilities from disappearing during UID downgrade.

2011-04-11 Thread crocket
How do I enable it via autoconf? On Tue, Apr 12, 2011 at 5:37 AM, Alon Bar-Lev wrote: > Usually, using cap should be enabled/disabled via autoconf. > > On Mon, Apr 11, 2011 at 11:23 PM, crocket wrote: >> >> diff -Naur a/init.c b/init.c >> --- a/init.c    2010-11-

[Openvpn-devel] I made a patch that prevents POSIX capabilities from disappearing during UID downgrade.

2011-04-11 Thread crocket
diff -Naur a/init.c b/init.c --- a/init.c2010-11-05 04:29:02.0 +0900 +++ b/init.c2011-04-12 05:11:43.540370471 +0900 @@ -41,6 +41,10 @@ #include "occ-inline.h" +#ifdef TARGET_LINUX +#include +#endif + static struct context *static_context; /* GLOBAL */ /* @@ -904,6 +908,10 @@