Messages in this thread | | | Date | Thu, 17 Oct 2013 02:20:50 +0100 | From | Al Viro <> | Subject | Re: [PATCH 1/3] switch_creds: Syscall to switch creds for file server ops |
| |
On Wed, Oct 16, 2013 at 06:18:16PM -0700, Eric W. Biederman wrote:
> That doesn't look bad but it does need capable(CAP_SETUID) && > capable(CAP_SETGID) or possibly something a little more refined.
D'oh
> I don't think we want file descriptor passing to all of a sudden become > a grant of privilege, beyond what the passed fd can do.
Definitely. And an extra ) to make it compile wouldn't hurt either...
| |