Messages in this thread | | | Date | Tue, 23 Sep 2008 21:59:27 -0700 | From | "Andrew G. Morgan" <> | Subject | Re: [PATCH 2/2] file capabilities: remove CONFIG_SECURITY_FILE_CAPABILITIES |
| |
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
Acked-by: Andrew G. Morgan <morgan@kernel.org>
Cheers
Andrew
Serge E. Hallyn wrote: > Remove the option to compile the kernel without file capabilities. Not > compiling file capabilities actually makes the kernel less safe, as it > includes the possibility for a task changing another task's capabilities. > > Some are concerned that userspace tools (and user education) are not > up to the task of properly configuring file capabilities on a system. > For those cases, there is now the ability to boot with the no_file_caps > boot option. This will prevent file capabilities from being used in > the capabilities recalculation at exec, but will not change the rest > of the kernel behavior which used to be switchable using the > CONFIG_SECURITY_FILE_CAPABILITIES option. > > Signed-off-by: Serge Hallyn <serue@us.ibm.com> > --- > fs/open.c | 8 -- > include/linux/capability.h | 2 - > include/linux/init_task.h | 4 - > kernel/capability.c | 158 -------------------------------------------- > security/Kconfig | 9 --- > security/commoncap.c | 53 --------------- > 6 files changed, 0 insertions(+), 234 deletions(-) -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFI2ckn+bHCR3gb8jsRAh1QAJ9yEYEdnUgOn5w18u6DgXNKCnAbWACgnq8j 70Oa+pgYJpRVsIPMSJcUGhY= =26lW -----END PGP SIGNATURE-----
| |