https://bugzilla.novell.com/show_bug.cgi?id=682244
https://bugzilla.novell.com/show_bug.cgi?id=682244#c11
--- Comment #11 from Ludwig Nussel 2011-05-06 11:48:45 CEST ---
something like this should work (untested):
--- a/daemon/gkd-capability.c
+++ b/daemon/gkd-capability.c
@@ -71,9 +71,9 @@ gkd_capability_obtain_capability_and_drop_privileges (void)
early_error ("failed dropping capabilities");
break;
case CAPNG_FAIL:
- case CAPNG_NONE:
early_error ("error getting process capabilities");
break;
+ case CAPNG_NONE: /* no special caps, let's hope RLIMIT_MEMLOCK
is sufficient */
case CAPNG_PARTIAL: /* File system based capabilities */
break;
}
Note that it doesn't actually check whether it has CAP_IPC_LOCK. So you could
trick it to make it run by setting some random fscap.
--
Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.