Re: quantum capabilities

[Lukasz Stelmach <stlman@poczta.fm>]

Pavel Machek wrote:
> On Wed 19-04-06 17:01:53, Lukasz Stelmach wrote:
>> Greetings All.
>>
>> I've found a strange phenomenon associated with capabilities. It seems to be a
>> quantum like.
>>
>> when I run (as root)
>>
>> delfin:~# /usr/sbin/execcap '= cap_net_raw=ep' /bin/sh -c 'getpcaps $$'
>> Capabilities for `2438': =ep cap_setpcap-ep
>>
>> I don't know what really happens to those capablities I zero. And I can't really
>> figure out for when I try the wavefunction collapses
>>
>> delfin:~# strace -o /dev/null /usr/sbin/execcap '= cap_net_raw=ep' /bin/sh -c \
>> 'getpcaps $$'
>> Capabilities for `2461': = cap_net_raw+ep
>>
>> Strange isn't it? Does it mean that processes can't really drop their privileges?
> 
> Is execcap setuid? strace does not work over setuid...

No it's not. And even if it was it sholudn't make any difference when I run
execcap logged in as root.

-- 
Było mi bardzo miło.                    Czwarta pospolita klęska, [...]
>Łukasz<                      Już nie katolicka lecz złodziejska.  (c)PP

Attachment: signature.asc
Description: OpenPGP digital signature