jordansissel / fpm

Effing package management! Build packages for multiple platforms (deb, rpm, etc) with great ease and sanity.
http://fpm.readthedocs.io/en/latest/
Other
11.08k stars 1.07k forks source link

Support file capabilities/extended attributes #1686

Open Snaipe opened 4 years ago

Snaipe commented 4 years ago

Packaging a directory where binaries have capabilities set seem to strip these capabilities (tested so far with RPM).

The workaround is to call setcap in a post-install script, but this adds an unwelcome dependency on whatever package provides setcap.

jlagermann commented 1 year ago

Running setcap in a post-install script will rendered the rpm unverifiable - I.E. a file on the filesystem is different to its representation in the package manifest.