From d401e94ca5f7945d3da2c2927bfb038da3a066dd Mon Sep 17 00:00:00 2001 From: Helmut Grohne Date: Sun, 3 Mar 2024 20:51:35 +0100 Subject: add function for prctl(PR_CAP_AMBIENT, PR_CAP_AMBIENT_RAISE, ...) --- examples/withallsubuids.py | 10 +--------- 1 file changed, 1 insertion(+), 9 deletions(-) (limited to 'examples/withallsubuids.py') diff --git a/examples/withallsubuids.py b/examples/withallsubuids.py index ead0482..3bed3bc 100755 --- a/examples/withallsubuids.py +++ b/examples/withallsubuids.py @@ -43,15 +43,7 @@ def main() -> None: capabilities.inheritable = capabilities.permitted & capabilities.effective capabilities.set() # Add all inheritable capabilities to the ambient set. - caps = capabilities.inheritable - while caps: - cap = caps & (~caps + 1) - caps ^= cap - linuxnamespaces.prctl( - 47, # PR_CAP_AMBIENT - 2, # PR_CAP_AMBIENT_RAISE - cap.bit_length() - 1, - ) + linuxnamespaces.prctl_raise_ambient_capabilities(capabilities.inheritable) if len(sys.argv) > 1: os.execvp(sys.argv[1], sys.argv[1:]) else: -- cgit v1.2.3