Messages in this thread | | | Date | Thu, 13 May 2004 12:42:49 -0700 | From | Chris Wright <> | Subject | Re: 2.6.6-mm2 |
| |
* Andrew Morton (akpm@osdl.org) wrote: > Chris Wright <chrisw@osdl.org> wrote: > > > > > > +static int capability_mask; > > +module_param_named(mask, capability_mask, int, 0); > > +MODULE_PARM_DESC(mask, "Mask of capability checks to ignore"); > > Is there a way to make this tunable at runtime, btw?
Yeah, it'd require sysctl or similar, and further reduces the security, unless you only allow bit clearing or something.
thanks, -chris -- Linux Security Modules http://lsm.immunix.org http://lsm.bkbits.net - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |