Actually attaching the patch now :)
diff -ru icecc-1.0.1/daemon/main.cpp icecc-1.0.1+ak/daemon/main.cpp
--- icecc-1.0.1/daemon/main.cpp 2013-07-11 15:41:17.000000000 +0200
+++ icecc-1.0.1+ak/daemon/main.cpp 2015-05-04 19:13:52.259493247 +0200
@@ -546,13 +546,17 @@
#ifdef HAVE_LIBCAP_NG
// We run as system daemon.
if (capng_have_capability( CAPNG_PERMITTED, CAP_SYS_CHROOT )) {
+ log_info() << "We are chroot capable due to CAP_SYS_CHROOT\n";
#else
if (getuid()==0) {
+ log_info() << "We are chroot capable due to uid==0\n";
#endif
strncpy(myaddr.sun_path, "/var/run/icecc/iceccd.socket", sizeof(myaddr.sun_path)-1);
unlink(myaddr.sun_path);
old_umask = umask(0);
} else { // Started by user.
+ log_error() << "We are not chroot capable. Disabling remote jobs.\n";
+ noremote = true;
strncpy(myaddr.sun_path, getenv("HOME"), sizeof(myaddr.sun_path)-1);
strncat(myaddr.sun_path, "/.iceccd.socket", sizeof(myaddr.sun_path)-1-strlen(myaddr.sun_path));
unlink(myaddr.sun_path);
@@ -1806,8 +1810,6 @@
capng_change_id(d.user_uid, d.user_gid, CAPNG_NO_FLAG);
capng_apply(CAPNG_SELECT_BOTH);
#endif
- } else {
- d.noremote = true;
}
setup_debug( debug_level, logfile );
diff -ru icecc-1.0.1/debian/control icecc-1.0.1+ak/debian/control
--- icecc-1.0.1/debian/control 2013-07-18 10:37:58.000000000 +0200
+++ icecc-1.0.1+ak/debian/control 2015-05-04 19:16:16.125481400 +0200
@@ -7,6 +7,7 @@
Build-Depends: debhelper (>= 9),
autotools-dev,
docbook2x, docbook-to-man, docbook-xml,
+ libcap-ng-dev,
libdevstat-dev [kfreebsd-any]
Homepage: http://en.opensuse.org/Icecream
Standards-Version: 3.9.4
diff -ru icecc-1.0.1/debian/rules icecc-1.0.1+ak/debian/rules
--- icecc-1.0.1/debian/rules 2013-06-06 16:57:58.000000000 +0200
+++ icecc-1.0.1+ak/debian/rules 2015-05-04 18:46:10.183096508 +0200
@@ -13,7 +13,7 @@
rm -rf debian/out
override_dh_auto_configure:
- dh_auto_configure -- --libexecdir='$${prefix}/lib'
+ dh_auto_configure -- --libexecdir='$${prefix}/lib' --with-libcap-ng=yes
override_dh_auto_build:
dh_auto_build
