helium-3rd-party/meta-openembedded
1
0
Fork 0
mirror of git://git.openembedded.org/meta-openembedded synced 2026-08-12 17:38:20 +00:00
Code Issues Packages Projects Releases Wiki Activity

gnome-keyring: set file capabilities in pkg_postinst

Browse Source 
file capabilities need to be set on gnome-keyring-daemon. This is now
possible using pkg_postinst function on the build host. Previous
workarounds are not needed anymore.

Signed-off-by: Daniel Wagenknecht <dwagenknecht@emlix.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
This commit is contained in:
Daniel Wagenknecht 2021-03-08 14:53:18 +01:00 committed by Khem Raj
parent 61e3bc3907
commit e8dd3c0251
1 changed files with 3 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
meta-gnome/recipes-gnome/gnome-keyring/gnome-keyring_3.36.0.bb
View File

@ -43,10 +43,8 @@ FILES_${PN} += " \
${base_libdir}/security/*${SOLIBSDEV} \
${libdir}/pkcs11/gnome-keyring-pkcs11.so \
"
# fix | gnome-keyring-daemon: insufficient process capabilities, unsecure memory might get used
# This does not make it through pseudo so perform on-target - sigh
pkg_postinst_ontarget_${PN} () {
setcap cap_ipc_lock+ep `which gnome-keyring-daemon`
pkg_postinst_${PN} () {
setcap cap_ipc_lock+ep $D/${bindir}/gnome-keyring-daemon
}
RDEPENDS_${PN} += "libcap-bin"
PACKAGE_WRITE_DEPS += "libcap-native"