diff options
author | Daniel J Walsh <dwalsh@redhat.com> | 2021-08-27 08:12:56 -0400 |
---|---|---|
committer | Daniel J Walsh <dwalsh@redhat.com> | 2021-08-27 08:13:01 -0400 |
commit | db60a1e654d2212fcc36145cf5e4ba0dd74ce622 (patch) | |
tree | 4074f0a4e0aed23846e8fdf986028eb258474300 | |
parent | 6f61ef87afe6695ca6cbd6e3b818ef619b6d54da (diff) | |
download | podman-db60a1e654d2212fcc36145cf5e4ba0dd74ce622.tar.gz podman-db60a1e654d2212fcc36145cf5e4ba0dd74ce622.tar.bz2 podman-db60a1e654d2212fcc36145cf5e4ba0dd74ce622.zip |
Add support for libsubid
This will enable remote access to /etc/subuid and /etc/subgid
information from ldap services, if shadow-utils ships with a libsubid.
[NO TESTS NEEDED] Since we have no way to test this.
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
-rw-r--r-- | Makefile | 1 | ||||
-rwxr-xr-x | hack/libsubid_tag.sh | 19 |
2 files changed, 20 insertions, 0 deletions
@@ -50,6 +50,7 @@ BUILDTAGS ?= \ $(shell hack/btrfs_tag.sh) \ $(shell hack/selinux_tag.sh) \ $(shell hack/systemd_tag.sh) \ + $(shell hack/libsubid_tag.sh) \ exclude_graphdriver_devicemapper \ seccomp PYTHON ?= $(shell command -v python3 python|head -n1) diff --git a/hack/libsubid_tag.sh b/hack/libsubid_tag.sh new file mode 100755 index 000000000..ab6af9e30 --- /dev/null +++ b/hack/libsubid_tag.sh @@ -0,0 +1,19 @@ +#!/usr/bin/env bash +if test $(${GO:-go} env GOOS) != "linux" ; then + exit 0 +fi +tmpdir="$PWD/tmp.$RANDOM" +mkdir -p "$tmpdir" +trap 'rm -fr "$tmpdir"' EXIT +cc -o "$tmpdir"/libsubid_tag -l subid -x c - > /dev/null 2> /dev/null << EOF +#include <shadow/subid.h> +int main() { + struct subid_range *ranges = NULL; + get_subuid_ranges("root", &ranges); + free(ranges); + return 0; +} +EOF +if test $? -eq 0 ; then + echo libsubid +fi |