oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

Use libcapng to drop all privileges

Browse Source 
except for CAPNG_NET_BIND_SERVICE so we can bind to ports < 1024.

Signed-off-by: Love Hornquist Astrand <lha@h5l.org>
This commit is contained in:
Guido Günther
2010-02-17 17:23:46 +01:00
committed by Love Hornquist Astrand
parent ec18315352
commit 45a94f309b
4 changed files with 193 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
configure.ac
View File

@@ -146,6 +146,24 @@ if test "$enable_krb4" != no ;then
AC_DEFINE([KRB4], 1, [Define to enable Kerberos 4.])
fi
dnl Need to test if pkg-config exists
PKG_PROG_PKG_CONFIG
dnl libcap-ng
AC_ARG_WITH([capng],
AC_HELP_STRING([--with-capng], [use libcap-ng to drop KDC privileges @<:@default=check@:>@]),
[],
[with_capng=check])
if test "$with_capng" != "no"; then
PKG_CHECK_MODULES([CAPNG], [libcap-ng >= 0.4.0],
[with_capng=yes],[with_capng=no])
fi
if test "$with_capng" = "yes"; then
AC_DEFINE_UNQUOTED([HAVE_CAPNG], 1, [whether capng is available for privilege reduction])
fi
AM_CONDITIONAL([HAVE_CAPNG], [test "$with_capng" != "no"])
AC_SUBST([CAPNG_CFLAGS])
AC_SUBST([CAPNG_LIBS])
dnl Check for sqlite
rk_TEST_PACKAGE(sqlite3,