lkml.org 
[lkml]   [1999]   [Apr]   [16]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    From
    SubjectRe: [PATCH] Capabilities, this time in elf section
    Date
    Richard Gooch writes:
    > Albert D. Cahalan writes:
    >> David L. Parsley writes:
    >>> Now, I have a suggestion that should apply equally to either solution; it
    >>> could be possible to specify in a mount option masks for permitted and
    >>> inheritable. This would limit the actual capabilites the mount would
    >>> honor. This could be nice for either implementation.
    >>
    >> This is great. It can not be supported by Richard Gooch's system though.
    >> I suppose one could scan the filesystem and then remount it.
    >
    > Sorry, I don't see why not.

    You wanted to insert code into the executable that would check for
    a capabilites section, instead of letting the kernel do the job.

    The kernel knows what the mount options were. Userspace has little
    clue what they were. You could add a system call for that or hope
    that /etc/mtab has the data you need. Both options are crummy.

    Your solution offers full support on old kernels, but that breaks
    if you add a system call to check the mount options.


    -
    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to majordomo@vger.rutgers.edu
    Please read the FAQ at http://www.tux.org/lkml/

    \
     
     \ /
      Last update: 2005-03-22 13:51    [W:0.018 / U:3.732 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site