From 856c2228df620c4051ab41dd2665a5fa2f2a7264 Mon Sep 17 00:00:00 2001
From: Thierry Parmentelat <thierry.parmentelat@inria.fr>
Date: Tue, 2 Jul 2013 13:31:09 +0200
Subject: [PATCH] lxcsu-internal to call capsh with --user=<slicename>
---
lxcsu-internal | 3 +--
1 file changed, 1 insertion(+), 2 deletions(-)
diff --git a/lxcsu-internal b/lxcsu-internal
index bb7c2a4..9dbb9ef 100755
--- a/lxcsu-internal
+++ b/lxcsu-internal
@@ -181,8 +181,7 @@ def main ():
cap_arg = '--drop='+drop_capabilities
if (not args.root):
- exec_args = [arch,'/usr/sbin/capsh',cap_arg,'--','--login']+args.command_to_run
-# Thierry's suggestion:exec_args = [arch,'/usr/sbin/capsh',cap_arg,'--user=%s'%slice_name,'--','--login',]+args.command_to_run
+ exec_args = [arch,'/usr/sbin/capsh',cap_arg,'--user=%s'%slice_name,'--','--login',]+args.command_to_run
else:
exec_args = [arch,'/usr/sbin/capsh','--','--login']+args.command_to_run
--
2.47.0