Use capsh to ensure file capabilities aren't set

2016-11-14 23:55:45 +00:00
parent db10424a9b
commit c4fb032d3b
12 changed files with 20 additions and 19 deletions
--- a/stage0/01-configure-apt/00-run.sh
+++ b/stage0/01-configure-apt/00-run.sh
@@ -11,7 +11,7 @@ else
 fi

 on_chroot apt-key add - < files/raspberrypi.gpg.key
-on_chroot sh -e - << EOF
+on_chroot << EOF
 apt-get update
 apt-get dist-upgrade -y
 EOF