capabilities: Add support for securebits flags
This adds securebits flags for start-stop-daemon and supervise-daemon by adding --secbits option. As a result, the user can specify securebits the program should run with. see capabilities(7)
This commit is contained in:
@@ -161,6 +161,10 @@ but with the standard error output.
|
||||
.It Fl -capabilities Ar cap-list
|
||||
Start the daemon with the listed inheritable, ambient and bounding capabilities.
|
||||
The format is the same as in cap_iab(3).
|
||||
.It Fl -secbits Ar sec-bits
|
||||
Set the security-bits for the program.
|
||||
The numeric value of the security-bits can be found in <sys/secbits.h> header file.
|
||||
The format is the same as in strtoul(3).
|
||||
.El
|
||||
.Sh ENVIRONMENT
|
||||
.Va SSD_IONICELEVEL
|
||||
|
Reference in New Issue
Block a user