capabilities: Add support for securebits flags

This adds securebits flags for start-stop-daemon and supervise-daemon
by adding --secbits option. As a result, the user can specify
securebits the program should run with. see capabilities(7)
This commit is contained in:
LinkTed
2022-01-03 17:41:57 +02:00
committed by Mike Frysinger
parent e045591845
commit 79e5edc1a3
6 changed files with 55 additions and 0 deletions

View File

@@ -161,6 +161,10 @@ but with the standard error output.
.It Fl -capabilities Ar cap-list
Start the daemon with the listed inheritable, ambient and bounding capabilities.
The format is the same as in cap_iab(3).
.It Fl -secbits Ar sec-bits
Set the security-bits for the program.
The numeric value of the security-bits can be found in <sys/secbits.h> header file.
The format is the same as in strtoul(3).
.El
.Sh ENVIRONMENT
.Va SSD_IONICELEVEL