Re: [libvirt] [RFC][PATCH] lxc: drop CAP_SYS_BOOT capability to prevent rebooting from inside containers
Matthias Bolte wrote:
2009/5/11 Daniel P. Berrange <berrange(a)redhat.com>:
> On Mon, May 11, 2009 at 05:59:45PM +0200, Matthias Bolte wrote:
>> Hi,
>>
>> I needed to apply the following two small changes to get it compile.
>>
>> On my system (Ubuntu 9.04) I don't have a sys/capability.h header, but
>> a linux/capability.h header as part of the linux-libc-dev package.
> That is because sys/capability.h is provided by libcap, not libc.
> I guess you don't have libcap-dev installed.
>
> $ rpm -qf /usr/include/sys/capability.h
> libcap-devel-2.06-4.fc9.i386
>
You guess was correct. With libcap-dev installed it compiles without problems.
We should check for the presence of libcap-dev in the configure script.
Dave