Messages in this thread | | | Subject | Re: capabilities patch (v 0.1) | From | Valdis.Kletnieks@vt ... | Date | Tue, 09 Aug 2005 16:28:31 -0400 |
| |
On Tue, 09 Aug 2005 07:26:21 +0200, David Madore said:
> * Second, a much more extensive change, the patch introduces a third > set of capabilities for every process, the "bounding" set. Normally > the bounding set has every capability in it
How is this different in semantics from the existing 'permitted' capset?
include/linux/capabilities.h:
typedef struct __user_cap_data_struct { __u32 effective; __u32 permitted; __u32 inheritable; } __user *cap_user_data_t;
[unhandled content-type:application/pgp-signature] | |