importd: add CAP_DAC_OVERRIDE capability
authorLubomir Rintel <lkundrak@v3.sk>
Mon, 13 Apr 2015 17:46:59 +0000 (19:46 +0200)
committerLennart Poettering <lennart@poettering.net>
Tue, 21 Apr 2015 00:45:34 +0000 (02:45 +0200)
commit15d7b51724cc9775f03f2af4d3eec7f48f39f7de
treef6629f32d7a488e7a545ccc10ffda513bf7ed0dd
parent1db0db4b7f9c53f03efef2037ef6b0b384bfb248
importd: add CAP_DAC_OVERRIDE capability

Fedora's filesystem package ships /usr/bin (and other directories) which are
not writable by its owner. machinectl pull-dkr (and possibly others) are not
able to extract those:

  14182 mkdirat(3, "usr", 0700)           = 0
  14182 mkdirat(3, "usr/bin", 0500)       = 0
  14182 openat(3, "usr/bin/[", O_WRONLY|O_CREAT|O_EXCL|O_NOCTTY|O_NONBLOCK|O_CLOEXEC, 0700) = -1 EACCES (Permission denied)
  ...
units/systemd-importd.service.in