From ddb5b94dd758c08fab3257edd94ae5a1fd46ae25 Mon Sep 17 00:00:00 2001 From: Christian Wiese Date: Wed, 11 Sep 2013 15:59:02 +0200 Subject: [PATCH] libcap: improved to check if we can build the pam module --- base/libcap/libcap.conf | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/base/libcap/libcap.conf b/base/libcap/libcap.conf index 561f21988..7ecfcbd06 100644 --- a/base/libcap/libcap.conf +++ b/base/libcap/libcap.conf @@ -26,3 +26,10 @@ hook_add postdoc 5 "rm -rvf $root$docdir/old; cp -v `match_source_file -p capfaq # make RAISE_SETFCAP=no install # var_append makeinstopt " " "RAISE_SETFCAP=no" + +# check if we can build the pam module which can be used to enforce inheritable +# capability sets for a specified user +if ! pkginstalled -f pam; then + var_append makeopt ' ' "PAM_CAP=no" + var_append makeinstopt ' ' "PAM_CAP=no" +fi