Messages in this thread | | | Date | Fri, 17 Nov 2006 19:37:41 +0100 | From | Chris Friedhoff <> | Subject | Re: [PATCH 1/1] security: introduce fs caps |
| |
> Good quesion. My gentoo ia32 machine uses libcap.so.1.10. Probably a FAQ, > but is 1.92 actually older than 1.10? looking at these locations, yes http://www.me.kernel.org/pub/linux/libs/security/linux-privs/old/kernel-2.3/ http://ftp.kernel.org/pub/linux/libs/security/linux-privs/kernel-2.4/
> | Kaigai also provides a srpm package to compile. > | VFS Capability Support -> fscaps version 1.0 [SRPM] > | (http://www.kaigai.gr.jp/pub/fscaps-1.0-kg.src.rpm) > > I'll try that next.
I installed sles10 in qemu on my pentium-m laptop, compiled a kernel with fscap support and installed fscaps-1.0-kg.i386.rpm and got "Invalid argument (errno=22)" error. trace output is attached
# id uid=0(root) gid=0(root) groups=0(root) # uname -a Linux sles10 2.6.19-rc3-fscaps-a #2 Fri Nov 17 09:17:40 CET 2006 i686 i686 i386 GNU/Linux # rpm -q fscaps fscaps-1.0-kg # zgrep -i capa /proc/config.gz CONFIG_SECURITY_FS_CAPABILITIES=y # setfcaps cap_net_raw=ep /bin/ping /bin/ping: Invalid argument (errno=22) # setfcaps cap_sys_module=ep /sbin/modprobe /sbin/modprobe: Invalid argument (errno=22) # ls -l /lib/libcap.so* lrwxrwxrwx 1 root root 11 Nov 17 09:51 /lib/libcap.so -> libcap.so.1 lrwxrwxrwx 1 root root 14 Nov 16 11:57 /lib/libcap.so.1 -> libcap.so.1.92 -rwxr-xr-x 1 root root 10456 Jun 16 15:14 /lib/libcap.so.1.92
-------------------- Chris Friedhoff chris@friedhoff.org
[unhandled content-type:application/octet-stream] | |