From cbca9abc73acf779a3110baa0d3c66960951b1fa Mon Sep 17 00:00:00 2001 From: "Andrew G. Morgan" Date: Sun, 5 Apr 2020 19:31:19 -0700 Subject: Support overriding the preferred shell for capsh. Either supply --shell=/xx/yy as an argument to capsh, or use the Make.Rules CAPSH_SHELL override when building. This is an adaptation of an idea from Rosen Penev. Signed-off-by: Andrew G. Morgan --- Make.Rules | 8 ++++++++ 1 file changed, 8 insertions(+) (limited to 'Make.Rules') diff --git a/Make.Rules b/Make.Rules index 8452002..d029296 100644 --- a/Make.Rules +++ b/Make.Rules @@ -87,6 +87,14 @@ CGO_LDFLAGS_ALLOW := -Wl,-wrap,.+ CGO_REQUIRED=$(shell $(topdir)/go/cgo-required.sh) endif +# If you want capsh to launch with something other than /bin/bash +# build like this: +# +# make CAPSH_SHELL='-DSHELL=\"/bin/sh\"' +# +# or undefine the following: +#CAPSH_SHELL := '-DSHELL="/bin/sh"' + # When installing setcap, you can arrange for the installation process # to set its inheritable bit to be able to place capabilities on files. # It can be used in conjunction with pam_cap (associated with su and -- cgit v1.2.3