Comment 5 for bug 975442

Revision history for this message
Jamie Strandboge (jdstrand) wrote :

This is because of these lines:
./cobbler/sub_process.py: p = Popen(["id"], preexec_fn=lambda: os.setuid(100))
./koan/sub_process.py: p = Popen(["id"], preexec_fn=lambda: os.setuid(100))

'capability dac_override,' seems ok with this otherwise very restrictive profile. Thanks!