Method ensure_privileges

src/executor/memory/executor.rs:79–94

Ensure memtrack can load its eBPF programs: either run as root or hold the required file capabilities. Tries a one-time capability grant if neither holds, and bails if that fails.

()

    /// required file capabilities. Tries a one-time capability grant if neither
    /// holds, and bails if that fails.
    fn ensure_privileges() -> Result<()> {
        if is_root_user() || has_memtrack_capabilities() {
            return Ok(());
        }

        ensure_memtrack_capabilities()?;

        if has_memtrack_capabilities() {
            return Ok(());
        }

        bail!(
            "{MEMTRACK_COMMAND} needs elevated privileges to load its eBPF programs, but the \
             required capabilities could not be granted."
        );
    }
}

#[async_trait(?Send)]