Messages in this thread | | | Date | Wed, 27 Aug 2008 19:48:08 -0500 | From | "Serge E. Hallyn" <> | Subject | Re: [patch] file capabilities: Add no_file_caps switch |
| |
Quoting James Morris (jmorris@namei.org): > On Wed, 27 Aug 2008, David Howells wrote: > > > (2) Neuter sys_capset(). I've been holding this off for the next merge > > window as it isn't a bugfix, unlike (1). Perhaps I should ask James to > > push it to Linus. James? > > Linus only pulled the PF_SUPERPRIV fix once the sys_capset change was > removed from the patch. It really does need to be a bugfix at this stage.
Ok, sorry, of course that makes sense. I was just confused about where the patch was originally heading.
Would it be appropriate to put the capset neutering patch in your security-testing tree, James, or does that feed straight into linux-next?
thanks, -serge
| |