mirrors/meta-openembedded
1
0
Fork 0
mirror of https://github.com/openembedded/meta-openembedded.git synced 2026-06-03 02:10:04 +00:00
Code Issues Projects Releases Wiki Activity

gnome-keyring: set file capabilities in pkg_postinst

Browse Source 
file capabilities need to be set on gnome-keyring-daemon. This is now
possible using pkg_postinst function on the build host. Previous
workarounds are not needed anymore.

Signed-off-by: Daniel Wagenknecht <dwagenknecht@emlix.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
This commit is contained in:
Daniel Wagenknecht
2021-03-08 14:53:18 +01:00
committed by Khem Raj
parent 61e3bc3907
commit e8dd3c0251
1 changed files with 3 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
meta-gnome/recipes-gnome/gnome-keyring/gnome-keyring_3.36.0.bb
+3 -5
View File
@@ -43,10 +43,8 @@ FILES_${PN} += " \
${base_libdir}/security/*${SOLIBSDEV} \ ${base_libdir}/security/*${SOLIBSDEV} \
${libdir}/pkcs11/gnome-keyring-pkcs11.so \ ${libdir}/pkcs11/gnome-keyring-pkcs11.so \
" "
# fix | gnome-keyring-daemon: insufficient process capabilities, unsecure memory might get used # fix | gnome-keyring-daemon: insufficient process capabilities, unsecure memory might get used
# This does not make it through pseudo so perform on-target - sigh pkg_postinst_${PN} () {
pkg_postinst_ontarget_${PN} () { setcap cap_ipc_lock+ep $D/${bindir}/gnome-keyring-daemon
setcap cap_ipc_lock+ep `which gnome-keyring-daemon`
} }
RDEPENDS_${PN} += "libcap-bin" PACKAGE_WRITE_DEPS += "libcap-native"