6 commits

Author	SHA1	Message	Date
Jörg Thalheim	eadffd9154	nixos/wrappers: fix applying capabilities ... With libcap 2.41 the output of cap_to_text changed, also the original author of code hoped that this would never happen. To counter this now the security-wrapper only relies on the syscall ABI, which is more stable and robust than string parsing. If new breakages occur this will be more obvious because version numbers will be incremented. Furthermore all errors no make execution explicitly fail instead of hiding errors behind debug environment variables and the code style was more consistent with no goto fail; goto fail; vulnerabilities (https://gotofail.com/)	2021-01-14 08:46:57 +01:00
Will Dietz	cb30a1b425	wrapper.c: fixup includes to work w/musl	2018-03-25 18:06:02 -05:00
Parnell Springmeyer	fb6d13c01a	Addressing feedback and fixing a bug	2017-02-14 07:38:45 -06:00
Parnell Springmeyer	cca2e11556	Resurrecting the single-wrapper read from sibling .real file behavior	2017-02-13 18:03:06 -06:00
Parnell Springmeyer	128bdac94f	Conditionally logging debug messages based on the WRAPPER_DEBUG env var being set (or not)	2017-01-30 12:59:29 -06:00
Parnell Springmeyer	2f113ee90a	setcap-wrapper: Minor refactor	2017-01-29 01:08:36 -06:00

Renamed from nixos/modules/security/wrappers/permissions-wrapper.c (Browse further)