summaryrefslogtreecommitdiff
path: root/examples/withallsubuids.py
diff options
context:
space:
mode:
authorHelmut Grohne <helmut@subdivi.de>2024-03-03 20:51:35 +0100
committerHelmut Grohne <helmut@subdivi.de>2024-03-03 20:54:22 +0100
commitd401e94ca5f7945d3da2c2927bfb038da3a066dd (patch)
tree09c878878e5a738de03e20eb63547124cb73a910 /examples/withallsubuids.py
parent64a660360e1cc20c5c5c14fcb4cdaa9b12c562f6 (diff)
downloadpython-linuxnamespaces-d401e94ca5f7945d3da2c2927bfb038da3a066dd.tar.gz
add function for prctl(PR_CAP_AMBIENT, PR_CAP_AMBIENT_RAISE, ...)
Diffstat (limited to 'examples/withallsubuids.py')
-rwxr-xr-xexamples/withallsubuids.py10
1 files changed, 1 insertions, 9 deletions
diff --git a/examples/withallsubuids.py b/examples/withallsubuids.py
index ead0482..3bed3bc 100755
--- a/examples/withallsubuids.py
+++ b/examples/withallsubuids.py
@@ -43,15 +43,7 @@ def main() -> None:
capabilities.inheritable = capabilities.permitted & capabilities.effective
capabilities.set()
# Add all inheritable capabilities to the ambient set.
- caps = capabilities.inheritable
- while caps:
- cap = caps & (~caps + 1)
- caps ^= cap
- linuxnamespaces.prctl(
- 47, # PR_CAP_AMBIENT
- 2, # PR_CAP_AMBIENT_RAISE
- cap.bit_length() - 1,
- )
+ linuxnamespaces.prctl_raise_ambient_capabilities(capabilities.inheritable)
if len(sys.argv) > 1:
os.execvp(sys.argv[1], sys.argv[1:])
else: