[Pkg-cacti-maint] Bug#904332: Enable Linux capabilities support

[Paul Gevers]

Hi Sven,

On 23-07-18 13:31, Sven Hartge wrote:
> Please enable support for Linux capabilities in spine.

Thanks for the suggestion.

> This is useful so one can use the "ICMP Ping" uptime checker in spine
> without needing to set spine setuid-root, just cap_net_raw is enough to
> get this working.

Sounds cool. I have zero knowledge of Linux capabilities though. Could
you provide a link to some good (for the noob) documentation on this?

> Currently this is not enabled because libcap-dev is missing as
> build-dependency.

Is that all that's needed?

> An additional dependency on libcap2-bin is necessary to allow "setcap
> cap_net_raw+ep /usr/sbin/spine" to work in postinst.

Can you elaborate? I guess you mean the binary package needs that
dependency manually added by me. And I guess that I should add some code
to the postinst. Where should it go (or doesn't it matter)? Any
drawbacks of doing this for all systems?

Paul

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 488 bytes
Desc: OpenPGP digital signature
URL: <http://alioth-lists.debian.net/pipermail/pkg-cacti-maint/attachments/20180724/b04057e7/attachment.sig>