[PATCH 0/2] file capabilities: two bugfixes

In an lwn.net article, Jonathan Corbet made two very helpful comments
about the file capabilities patch currently being tested in -mm.  The
first is that capabilities are being honored on nosuid filesystems.
The other is that root can lose capabilities by executing files with
only some capabilities set.  The next two patches change these
behaviors.

thanks,
-serge
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to [email protected]
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/

Follow-Ups:
- Re: [PATCH 0/2] file capabilities: two bugfixes
  - From: Seth Arnold <[email protected]>
- Re: [PATCH 0/2] file capabilities: two bugfixes
  - From: Casey Schaufler <[email protected]>
- [PATCH 2/2] file capabilities: honor !SECURE_NOROOT
  - From: "Serge E. Hallyn" <[email protected]>
- [PATCH 1/2] file capabilities: don't do file caps if MNT_NOSUID
  - From: "Serge E. Hallyn" <[email protected]>

Prev by Date: Re: [PATCH] WorkStruct: Implement generic UP cmpxchg() where an arch doesn't support it
Next by Date: Re: [PATCH] WorkStruct: Implement generic UP cmpxchg() where an arch doesn't support it
Previous by thread: [RFC] Cleanup slab headers / API to allow easy addition of new slab allocators
Next by thread: [PATCH 1/2] file capabilities: don't do file caps if MNT_NOSUID
Index(es):
- Date
- Thread

[Index of Archives] [Kernel Newbies] [Netfilter] [Bugtraq] [Photo] [Stuff] [Gimp] [Yosemite News] [MIPS Linux] [ARM Linux] [Linux Security] [Linux RAID] [Video 4 Linux] [Linux for the blind] [Linux Resources]