Skip to content

Commit 0aee79e

Browse files
authored
fix: correct Fedora 40 detection, and be more verbose about version (#13)
1 parent f153348 commit 0aee79e

File tree

1 file changed

+6
-4
lines changed

1 file changed

+6
-4
lines changed

1_prune.sh

Lines changed: 6 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -198,11 +198,13 @@ setcap cap_net_bind_service=ep ./usr/bin/rsh
198198
setcap cap_sys_admin=p $(realpath ./usr/bin/sunshine)
199199

200200
# SSSD
201-
if [ -f ${TREE}/etc/os-release ] &&
202-
[ $(cat ${TREE}/etc/os-release | grep VERSION_ID | grep 40) ]; then
203-
echo "Detected Fedora version: 40"
204-
echo "Not setting capabilities on sssd binaries for Fedora 40."
201+
if [ -f ${TREE}/usr/etc/os-release ] && \
202+
[ $(cat ${TREE}/usr/etc/os-release | grep VERSION_ID | grep 40) ]; then
203+
echo "Detected Fedora version 40."
204+
echo "NOT setting capabilities on sssd binaries."
205205
else
206+
echo "Detected Fedora version 41 or higher."
207+
echo "Setting latest capabilities on sssd binaries."
206208
setcap cap_dac_read_search,cap_setgid,cap_setuid=p ./usr/libexec/sssd/krb5_child
207209
setcap cap_dac_read_search=p ./usr/libexec/sssd/ldap_child
208210
setcap cap_setgid,cap_setuid=p ./usr/libexec/sssd/selinux_child

0 commit comments

Comments
 (0)