Messages in this thread |  | | | Date | Tue, 23 Sep 2008 16:48:37 +1000 (EST) | | From | James Morris <> | | Subject | Re: [PATCH 1/2] file capabilities: add no_file_caps switch (v2) | |
On Mon, 22 Sep 2008, Serge E. Hallyn wrote:
> > I agree. These other behaviorial changes should not depend on
> > CONFIG_SECURITY_FILE_CAPABILITIES; the old behavior should just be fixed
> > instead.
>
> That of course would be the point of the patch 3/3, which removes
> CONFIG_SECURITY_FILE_CAPABILITIES as a config option.
btw, don't make it Y at all (patch 1/3 ?), as Linus has outlawed making
new features default to Y.
> Should I do that when I redo the patch as per Stephen's suggestion to
> use filecaps=0/1?
Given that there's existing use of no_file_caps, and that I doubt Fedora
will provide an install option to disable it, probably just stick with
no_file_caps.
- James
--
James Morris
<jmorris@namei.org>
|  |