additional autoconf check for ambient raise securebit to support kernels prior 4.3

Signed-off-by: Toni Uhlig <matzeton@googlemail.com>

1 files changed, 4 insertions, 0 deletions

diff --git a/src/jail.c b/src/jail.c
index b307706..1b35cc7 100644
--- a/src/jail.c
+++ b/src/jail.c
@@ -42,7 +42,9 @@
 #include <pty.h>
 #include <utmp.h>
 #include <limits.h>
+#ifdef HAVE_SECUREBITS_AMBIENT
 #include <linux/securebits.h>
+#endif
 #include <sys/signalfd.h>
 #include <sys/wait.h>
 #include <sys/prctl.h>
@@ -310,10 +312,12 @@ static int jail_childfn(prisoner_process *ctx)
     set_procname("[potd] jail-client");
     if (prctl(PR_SET_PDEATHSIG, SIGTERM) != 0)
         FATAL("%s", "Jail child setting deathsig");
+#ifdef HAVE_SECUREBITS_AMBIENT
     if (prctl(PR_SET_SECUREBITS,
               SECBIT_NOROOT | SECBIT_NOROOT_LOCKED |
               SECBIT_NO_CAP_AMBIENT_RAISE | SECBIT_NO_CAP_AMBIENT_RAISE_LOCKED))
         FATAL("%s", "Jail child setting securebits");
+#endif
     if (prctl(PR_SET_NO_NEW_PRIVS, 1, 0, 0, 0))
         FATAL("%s", "Jail child setting no new privs");