import: we need CAP_DAC_OVERRIDE for untarring systems after all

diff --git a/src/import/import-common.c b/src/import/import-common.c
index f4643133e9d3ffb65f503f4f84802f7dc166690b..e5531b89c5dd6901aba558a1193f97a18930506c 100644 (file)
--- a/src/import/import-common.c
+++ b/src/import/import-common.c
@@ -471,7 +471,8 @@ int import_fork_tar(const char *path, pid_t *ret) {
                         (1ULL << CAP_FOWNER) |
                         (1ULL << CAP_FSETID) |
                         (1ULL << CAP_MKNOD) |
-                        (1ULL << CAP_SETFCAP);
+                        (1ULL << CAP_SETFCAP) |
+                        (1ULL << CAP_DAC_OVERRIDE);
 
                 /* Child */