[Buildroot] How to set capabilities in rootfs images ?

[Buildroot] How to set capabilities in rootfs images ?

[Romain Naour]

Hi all,

I would like to know if it's possible to set capabilities whith setcap for a specific binary
inside buildroot's rootfs image ?

I created a user account on target and I want to be able to run a program that needs CAP_SYS_NICE.

From what I have seen, it would be possible only in the fakeroot since the fakeroot's script
start with "chown -R 0:0".
chown drop all capabilities.

It appears that setcap tool is not working in fakeroot.

So, I updated fakeroot to the latest version (1.20) to have the last commit:
https://alioth.debian.org/scm/browser.php?group_id=30001

Also, I'm not sure if I need a specific version of host-tar (1.27.1) to save capabilities.

Do you have any suggestions ?

Thanks,
-- 
Romain Naour

OPEN WIDE Ing?nierie - Paris
23/25, rue Daviel| 75013 PARIS
http://ingenierie.openwide.fr

Le blog des technologies libres et embarqu?es :
http://www.linuxembedded.fr