> On July 22, 2016, 12:32 a.m., Jie Yu wrote: > > src/linux/capabilities.cpp, lines 34-39 > > <https://reviews.apache.org/r/50266/diff/1/?file=1448444#file1448444line34> > > > > Any reason why we need to declare them here? Shouldn't > > `<linux/capability>` already declared them? > > Benjamin Bannier wrote: > These are libc function mapping to sys calls which are only exposed via > libcap development headers. Declaring them here ourself allows us to not > depend on the presence of the development header files. I agree this is not > something we do often. Should we just introduce the dependency on the dev > files and do away with our own decls of these functions here?
OK. Please add more comments here (basically what you describe here). - Jie ----------------------------------------------------------- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/50266/#review143038 ----------------------------------------------------------- On Aug. 9, 2016, 12:30 p.m., Benjamin Bannier wrote: > > ----------------------------------------------------------- > This is an automatically generated e-mail. To reply, visit: > https://reviews.apache.org/r/50266/ > ----------------------------------------------------------- > > (Updated Aug. 9, 2016, 12:30 p.m.) > > > Review request for mesos and Jie Yu. > > > Bugs: MESOS-5051 > https://issues.apache.org/jira/browse/MESOS-5051 > > > Repository: mesos > > > Description > ------- > > This change introduces basic API for linux capabilities. This is not a > comprehensive API but is strictly limited to the need for securing Mesos > containers using linux capabilities. > > This patch is based on the work in https://reviews.apache.org/r/46370/. > > > Diffs > ----- > > src/CMakeLists.txt 1286ee08fe2d60867326a1f2585f054c20b52208 > src/Makefile.am 1a9b083493612cf610b80ac5a1c11c29d6302933 > src/linux/capabilities.hpp PRE-CREATION > src/linux/capabilities.cpp PRE-CREATION > > Diff: https://reviews.apache.org/r/50266/diff/ > > > Testing > ------- > > `make check` and `sudo make check` (Debian jessie, gcc-4.9.2, w/o > optimizations) > > > Thanks, > > Benjamin Bannier > >
