Skip to content

fix(linux): security: drop CAP_SYS_ADMIN when possible, retain CAP_SYS_NICE - #5075

Merged
ReenigneArcher merged 2 commits into
LizardByte:masterfrom
psyke83:keep_nice
May 6, 2026
Merged

ReenigneArcher merged 2 commits into
LizardByte:masterfrom
psyke83:keep_nice

fix(linux): security: drop CAP_SYS_ADMIN as soon as possible

780885a
Select commit
Loading
Failed to load commit list.
Codecov / codecov/project succeeded May 6, 2026 in 0s

No report found to compare against

View this Pull Request on Codecov

No report found to compare against

Details

Codecov Report

❌ Patch coverage is 29.41176% with 12 lines in your changes missing coverage. Please review.
⚠️ Please upload report for BASE (master@dd30d05). Learn more about missing BASE report.
✅ All tests successful. No failed tests found.

Files with missing lines Patch % Lines
src/platform/linux/misc.cpp 38.46% 7 Missing and 1 partial ⚠️
src/platform/linux/portalgrab.cpp 0.00% 2 Missing and 1 partial ⚠️
src/platform/linux/kwingrab.cpp 0.00% 1 Missing ⚠️
Additional details and impacted files

Impacted file tree graph

@@            Coverage Diff            @@
##             master    #5075   +/-   ##
=========================================
  Coverage          ?   17.85%           
=========================================
  Files             ?      111           
  Lines             ?    23982           
  Branches          ?    10512           
=========================================
  Hits              ?     4281           
  Misses            ?    17288           
  Partials          ?     2413           
Files with missing lines Coverage Δ
src/platform/common.h 37.16% <ø> (ø)
src/platform/linux/kwingrab.cpp 0.00% <0.00%> (ø)
src/platform/linux/portalgrab.cpp 18.57% <0.00%> (ø)
src/platform/linux/misc.cpp 17.87% <38.46%> (ø)

Continue to review full report in Codecov by Sentry.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update dd30d05...780885a. Read the comment docs.