lkml.org 
[lkml]   [2005]   [Jan]   [7]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectRe: [PATCH] [request for inclusion] Realtime LSM
Andrew Morton wrote:
> Lee Revell <rlrevell@joe-job.com> wrote:
>
>>Really, I think Linux has owned the server space for so long that some
>>folks on this list are getting hubristic. Just because you have the
>>best server OS does not mean it's the best at everything.
>
>
> nah, the requirement is clearly valid, and longstanding. We need to
> satisfy it. It's just a matter of working out the best way.
>
> Chris Wright <chrisw@osdl.org> wrote:
>
>>...
>>Last I checked they could be controlled separately in that module. It
>>has been suggested (by me and others) that one possible solution would
>>be to expand it to be generic for all caps.
>
>
> Maybe this is the way?

This could give an advantage for e.g. networked daemons, too. No more
root privilege necessary for applications just to bind to a privileged
port which does make life easier (CAP_NET_BIND_SERVICE). Other ideas for
e.g. CAP_NET_RAW or CAP_SYS_RAWIO come to mind. Using the current
capabilties in this design as all incuding supersets that can be defined
more fine grained in a later step I guess should suit others, too. The
remaining problem would then be the design of an extensible interface
that is backwards compatible.

--
Andreas Steinmetz SPAMmers use robotrap@domdv.de
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/

\
 
 \ /
  Last update: 2005-03-22 14:09    [W:0.377 / U:0.980 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site