Messages in this thread | | | From | Roland McGrath <> | Subject | Re: [PATCH 2/2] exit_notify: kill the wrong capable(CAP_KILL) check | Date | Wed, 25 Feb 2009 11:41:40 -0800 (PST) |
| |
> I can't understand why exit_notify() checks capable(CAP_KILL), but this > looks just wrong.
I don't know either why it's there. My guess is that it was not actually thought out specifically, just a "unless capable" exception added when the security-motivated exclusions (exec_id stuff) were added.
I can't think of any reason not to drop this check.
Thanks, Roland
| |