Messages in this thread | | | Date | Thu, 28 Aug 2008 17:45:34 +0300 | From | Markku Savela <> | Subject | Re: Frustrated with capabilities.. |
| |
> From: Pavel Machek <pavel@suse.cz>
> Yes, you need upcoming filesystem capabilities. Binary may not > inherit capabilities unless filesystem flags permit that.
I think this is wrong. Normal executables inherit uid/gid and supplementary groups by default. Why should capabilities be any different?
IMHO, even with file system capabilities, the default should be inherit, if nothing else is specified.
| |