Hi!
> Attempt to make capabilities mildly useful, without breaking anything
> and while still adhering to POSIX.1e semantics:
>
> * add a "inhcaps" mount option (MS_INHCAPS) which provides full
> executable inheritable and effective sets (we cannot provide
> finer-grained control over the mask, as fs-independent mount
> options are only one bit wide each);
> * re-enable CAP_SETPCAP which had been disabled following an
> incorrect analysis of a past sendmail security hole.
Okay, I guess these two should go as a separate patches... Otherwise
patch looks okay to me.
Acked-by: Pavel Machek <[email protected]>
Pavel
--
(english) http://www.livejournal.com/~pavelmachek
(cesky, pictures) http://atrey.karlin.mff.cuni.cz/~pavel/picture/horses/blog.html
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to [email protected]
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/
[Index of Archives]
[Kernel Newbies]
[Netfilter]
[Bugtraq]
[Photo]
[Stuff]
[Gimp]
[Yosemite News]
[MIPS Linux]
[ARM Linux]
[Linux Security]
[Linux RAID]
[Video 4 Linux]
[Linux for the blind]
[Linux Resources]
