fix "setpriv: libcap-ng is too old for 'all' caps" error

query available capabilities instead of using "all" caps, as
this fails with kernel 5.9.0

see #46
This commit is contained in:
Bernhard B
2021-01-08 19:12:32 +01:00
parent 313e87c102
commit a63a80d464

View File

@@ -12,5 +12,8 @@ echo "WARNING: signal-cli-rest-api runs as signal-api (not as root!)"
echo "Run 'su signal-api' before using signal-cli!"
EOF
cap_prefix="-cap_"
caps="$cap_prefix$(seq -s ",$cap_prefix" 0 $(cat /proc/sys/kernel/cap_last_cap))"
# Start API as signal-api user
exec setpriv --reuid=1000 --regid=1000 --init-groups --inh-caps=-all signal-cli-rest-api $@
exec setpriv --reuid=1000 --regid=1000 --init-groups --inh-caps=$caps signal-cli-rest-api $@