From e8dd3c02519ec38344b8b9962b833eeb5668f01a Mon Sep 17 00:00:00 2001 From: Daniel Wagenknecht Date: Mon, 8 Mar 2021 14:53:18 +0100 Subject: [PATCH] gnome-keyring: set file capabilities in pkg_postinst file capabilities need to be set on gnome-keyring-daemon. This is now possible using pkg_postinst function on the build host. Previous workarounds are not needed anymore. Signed-off-by: Daniel Wagenknecht Signed-off-by: Khem Raj --- .../recipes-gnome/gnome-keyring/gnome-keyring_3.36.0.bb | 8 +++----- 1 file changed, 3 insertions(+), 5 deletions(-) diff --git a/meta-gnome/recipes-gnome/gnome-keyring/gnome-keyring_3.36.0.bb b/meta-gnome/recipes-gnome/gnome-keyring/gnome-keyring_3.36.0.bb index 8f318bb157..3fc16bb0a9 100644 --- a/meta-gnome/recipes-gnome/gnome-keyring/gnome-keyring_3.36.0.bb +++ b/meta-gnome/recipes-gnome/gnome-keyring/gnome-keyring_3.36.0.bb @@ -43,10 +43,8 @@ FILES_${PN} += " \ ${base_libdir}/security/*${SOLIBSDEV} \ ${libdir}/pkcs11/gnome-keyring-pkcs11.so \ " - # fix | gnome-keyring-daemon: insufficient process capabilities, unsecure memory might get used -# This does not make it through pseudo so perform on-target - sigh -pkg_postinst_ontarget_${PN} () { - setcap cap_ipc_lock+ep `which gnome-keyring-daemon` +pkg_postinst_${PN} () { + setcap cap_ipc_lock+ep $D/${bindir}/gnome-keyring-daemon } -RDEPENDS_${PN} += "libcap-bin" +PACKAGE_WRITE_DEPS += "libcap-native"