[Buildroot] How to set capabilities in rootfs images ?

Romain Naour romain.naour at openwide.fr
Mon Feb 10 10:25:50 UTC 2014


Hi all,

I would like to know if it's possible to set capabilities whith setcap for a specific binary
inside buildroot's rootfs image ?

I created a user account on target and I want to be able to run a program that needs CAP_SYS_NICE.

>From what I have seen, it would be possible only in the fakeroot since the fakeroot's script
start with "chown -R 0:0".
chown drop all capabilities.

It appears that setcap tool is not working in fakeroot.

So, I updated fakeroot to the latest version (1.20) to have the last commit:
https://alioth.debian.org/scm/browser.php?group_id=30001

Also, I'm not sure if I need a specific version of host-tar (1.27.1) to save capabilities.

Do you have any suggestions ?

Thanks,
-- 
Romain Naour

OPEN WIDE Ingénierie - Paris
23/25, rue Daviel| 75013 PARIS
http://ingenierie.openwide.fr

Le blog des technologies libres et embarquées :
http://www.linuxembedded.fr



More information about the buildroot mailing list