Re: [libvirt] [RFC][PATCH] lxc: drop CAP_SYS_BOOT capability to prevent rebooting from inside containers

Matthias Bolte wrote: >2009/5/11 Daniel P. Berrange <berrange(a)redhat.com&gt;: >>On Mon, May 11, 2009 at 05:59:45PM +0200, Matthias Bolte wrote: >>>Hi, >>> >>>I needed to apply the following two small changes to get it compile. >>> >>>On my system (Ubuntu 9.04) I don't have a sys/capability.h header, but >>>a linux/capability.h header as part of the linux-libc-dev package. >>That is because sys/capability.h is provided by libcap, not libc. >>I guess you don't have libcap-dev installed. >> >>$ rpm -qf /usr/include/sys/capability.h >>libcap-devel-2.06-4.fc9.i386 >> > >You guess was correct. With libcap-dev installed it compiles without >problems. We should check for the presence of libcap-dev in the configure script.