Re: RFC: Passing on initial client user in systemd-userdbd

[Lennart Poettering <lennart@xxxxxxxxxxxxxx>]

On Di, 29.11.22 11:50, Dominik George (nik@xxxxxxxxxxxxx) wrote:

> Hi,
>
> > in theory, I have implemented that now […]
>
> In practice now, as well:
>
>   https://github.com/systemd/systemd/pull/25556
>
> However, something kicked back here a bit… systemd-userdbd drops all
> capabilities, and sending SO_PASSCRED requires CAP_SYS_ADMIN…
>
> What do we do about that?

Just add the capability to the service unit file.

Lennart

--
Lennart Poettering, Berlin