Alawn/shadowsocks-libev
1
0
Fork 0
mirror of https://github.com/shadowsocks/shadowsocks-libev.git synced 2026-10-20 21:43:41 +00:00
Code Releases Activity

debian/shadowsocks-libev.postinst: Limit capabilities setting

Browse Source 
setcap setting is only for configure/reconfigure case in postinst script
This commit is contained in:
Roger Shimizu
2017-01-06 05:49:19 -06:00
committed by Max Lv
parent c807d2d6c4
commit b85ae24d7c
1 changed files with 20 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
debian/shadowsocks-libev.postinst
Vendored
+20 -6
View File
@@ -2,15 +2,29 @@
set -e
if [ -f /sbin/setcap ]; then
setcap cap_net_bind_service+ep /usr/bin/ss-local 2>/dev/null
setcap cap_net_bind_service+ep /usr/bin/ss-server 2>/dev/null
setcap cap_net_bind_service+ep /usr/bin/ss-tunnel 2>/dev/null
setcap cap_net_bind_service+ep /usr/bin/ss-redir 2>/dev/null
fi
# POSIX-compliant maint function recommend by devref
# to check for the existence of a command
# https://www.debian.org/doc/manuals/developers-reference/ch06.html#bpp-debian-maint-scripts
pathfind() {
OLDIFS="$IFS"
IFS=:
for p in $PATH; do
if [ -x "$p/$*" ]; then
IFS="$OLDIFS"
return 0
fi
done
IFS="$OLDIFS"
return 1
}
case "$1" in
configure|reconfigure)
pathfind setcap && setcap \
cap_net_bind_service+ep /usr/bin/ss-local \
cap_net_bind_service+ep /usr/bin/ss-redir \
cap_net_bind_service+ep /usr/bin/ss-server \
cap_net_bind_service+ep /usr/bin/ss-tunnel
if [ ! -f /etc/shadowsocks-libev/config.json ]; then
passwd=$(apg -n 1 -M ncl)
mkdir -p /etc/shadowsocks-libev