diff options
author | Helmut Grohne <helmut@subdivi.de> | 2024-03-03 20:51:35 +0100 |
---|---|---|
committer | Helmut Grohne <helmut@subdivi.de> | 2024-03-03 20:54:22 +0100 |
commit | d401e94ca5f7945d3da2c2927bfb038da3a066dd (patch) | |
tree | 09c878878e5a738de03e20eb63547124cb73a910 /examples/withallsubuids.py | |
parent | 64a660360e1cc20c5c5c14fcb4cdaa9b12c562f6 (diff) | |
download | python-linuxnamespaces-d401e94ca5f7945d3da2c2927bfb038da3a066dd.tar.gz |
add function for prctl(PR_CAP_AMBIENT, PR_CAP_AMBIENT_RAISE, ...)
Diffstat (limited to 'examples/withallsubuids.py')
-rwxr-xr-x | examples/withallsubuids.py | 10 |
1 files changed, 1 insertions, 9 deletions
diff --git a/examples/withallsubuids.py b/examples/withallsubuids.py index ead0482..3bed3bc 100755 --- a/examples/withallsubuids.py +++ b/examples/withallsubuids.py @@ -43,15 +43,7 @@ def main() -> None: capabilities.inheritable = capabilities.permitted & capabilities.effective capabilities.set() # Add all inheritable capabilities to the ambient set. - caps = capabilities.inheritable - while caps: - cap = caps & (~caps + 1) - caps ^= cap - linuxnamespaces.prctl( - 47, # PR_CAP_AMBIENT - 2, # PR_CAP_AMBIENT_RAISE - cap.bit_length() - 1, - ) + linuxnamespaces.prctl_raise_ambient_capabilities(capabilities.inheritable) if len(sys.argv) > 1: os.execvp(sys.argv[1], sys.argv[1:]) else: |