Re: + smack-version-11c-simplified-mandatory-access-control-kernel.patch added to -mm tree

Quoting [email protected] ([email protected]):
> +/*
> + * There are not enough CAP bits available to make this
> + * real, so Casey borrowed the capability that looks to
> + * him like it has the best balance of similarity amd
> + * low use.
> + */
> +#define CAP_MAC_OVERRIDE CAP_LINUX_IMMUTABLE

Hey Casey,

note that 64-bit capabilities are now in -mm, so you could grab your own
capability.

-serge
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to [email protected]
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/

---

• Follow-Ups:
  • Re: + smack-version-11c-simplified-mandatory-access-control-kernel.patch added to -mm tree
    • From: Stephen Smalley <[email protected]>

• Prev by Date: Re: Problem with ufs nextstep in 2.6.18 (debian)
• Next by Date: Re: [lm-sensors] broken suspend [Was: 2.6.24-rc2-mm1]
• Previous by thread: [PATCH][IPC] Lost unlock and fput in mqueue.c on error path
• Next by thread: Re: + smack-version-11c-simplified-mandatory-access-control-kernel.patch added to -mm tree
• Index(es):
  • Date
  • Thread

[Index of Archives]     [Kernel Newbies]     [Netfilter]     [Bugtraq]     [Photo]     [Stuff]     [Gimp]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Video 4 Linux]     [Linux for the blind]     [Linux Resources]