icecc/icecream — pull request #7 by rbelem (2012-12-12 01:46:17+00:00)
Title: libcap-ng support

This patch set is a attempt to make iceccd a more secure.

The first patch moves the socket and log to an icecc dir. The icecc user will be the owner, so iceccd, when running with regular user, will be able to create, read and write files.

The second patch just renames the variables from nobody to user.

The third one clean all root capabilities except the chroot using libcap-ng and ifdef everything related to changing user id, because the user was changed after the capabilities cleanup.