73ec7f243f
* in progs/capsh.c is the bash path hardcoded to '/bin/bash'. * this fix removes the absolute path und use 'execvpe' to call 'bash'.
26 lines
506 B
Nix
26 lines
506 B
Nix
{stdenv, libcap}:
|
|
|
|
assert stdenv.isLinux;
|
|
|
|
stdenv.mkDerivation rec {
|
|
name = "libcap-progs-${libcap.version}";
|
|
|
|
inherit (libcap) src makeFlags;
|
|
|
|
buildInputs = [ libcap ];
|
|
|
|
prePatch = ''
|
|
# use relative bash path
|
|
substituteInPlace progs/capsh.c --replace "/bin/bash" "bash"
|
|
|
|
# ensure capsh can find bash in $PATH
|
|
substituteInPlace progs/capsh.c --replace execve execvpe
|
|
'';
|
|
|
|
preConfigure = "cd progs";
|
|
|
|
installFlags = "RAISE_SETFCAP=no";
|
|
|
|
postInstall = libcap.postinst name;
|
|
}
|