|
|
@@ -2882,7 +2882,7 @@ enableRootDropping() {
|
|
|
#== CAP_SYS_ADMIN:访问特权 perf 事件信息
|
|
|
#== CAP_SYS_RESOURCE:忽略资源限制
|
|
|
#== CAP_NET_ADMIN:允许执行多种网络有关的操作
|
|
|
- commandErrorWrapper setcap cap_setgid,cap_setuid,cap_dac_override,cap_fowner,cap_ipc_lock,cap_sys_ptrace,cap_sys_admin,cap_sys_resource,cap_net_admin+ep "${AGENT_BIN_DIR}/${AGENT_PROC}"
|
|
|
+ commandErrorWrapper setcap cap_setgid,cap_setuid,cap_dac_override,cap_fowner,cap_chown,cap_ipc_lock,cap_sys_ptrace,cap_sys_admin,cap_sys_resource,cap_net_admin+ep "${AGENT_BIN_DIR}/${AGENT_PROC}"
|
|
|
local setCapCwServerAgentExitCode=$?
|
|
|
if [ ${setCapCwServerAgentExitCode} -eq 0 ] ; then
|
|
|
toConsoleInfo "Set file capabilities [${AGENT_PROC}]"
|
Carl