Replace setuid with capabilities for better security

1 files changed, 7 insertions, 0 deletions

diff --git a/besttrace.install b/besttrace.install
new file mode 100644
index 000000000000..34d40e69082e
--- /dev/null
+++ b/besttrace.install
@@ -0,0 +1,7 @@
+post_install() {
+   setcap cap_net_raw=ep usr/bin/besttrace 2>/dev/null || chmod +s usr/bin/besttrace
+}
+
+post_upgrade() {
+  post_install "$1"
+}