[lkml]   [2000]   [Feb]   [21]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
SubjectRe: Capabilities

> - Once we have file-based capabilities, we can implement that. Here, the idea I
> posted before (which was shamelessly stolen from another OS) can be used. The
> kernel boots in ``non-trusted'' mode; SUID root binaries get all capabilities. A
> process in the init scripts then switches the system into ``trusted'' mode.
> After that, SUID root binaries are treated no different anymore.

Switching into another mode of operation is just plain ugly. We can
work without that.
I'm "In my country we have almost anarchy and I don't care."
Panos Katsaloulis describing me w.r.t. patents me at

To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to
Please read the FAQ at

 \ /
  Last update: 2005-03-22 13:56    [from the cache]
©2003-2014 Jasper Spaans. hosted at Digital Ocean