diff options
Diffstat (limited to 'debian/vyatta-cfg-system.postinst.in')
| -rw-r--r-- | debian/vyatta-cfg-system.postinst.in | 11 |
1 files changed, 11 insertions, 0 deletions
diff --git a/debian/vyatta-cfg-system.postinst.in b/debian/vyatta-cfg-system.postinst.in index b2719bc5..288ea7c5 100644 --- a/debian/vyatta-cfg-system.postinst.in +++ b/debian/vyatta-cfg-system.postinst.in @@ -154,6 +154,17 @@ dpkg-reconfigure -f noninteractive openssh-server rm -f /etc/ssh/*.broken update-rc.d -f ssh remove >/dev/null +# +# Set extended capabilities on some files +setcap cap_net_admin+e /usr/sbin/ethtool +setcap cap_sys_admin+e /sbin/sysctl +setcap cap_audit_write+e /bin/vbash +setcap cap_net_admin+e /sbin/ip +setcap cap_net_admin+e /sbin/tc cap_net_admin+e /sbin/ip +setcap cap_net_admin+e /usr/sbin/arp +setcap cap_net_admin+e /sbin/iptables cap_net_admin+e /sbin/ip6tables +setcap cap_net_admin+e /usr/sbin/conntrack + # Fix up PAM configuration for login so that invalid users are prompted # for password sed -i 's/requisite[ \t][ \t]*pam_securetty.so/required pam_securetty.so/' $rootfsdir/etc/pam.d/login |