On 1999-05-16T02:25:56,
   "Albert D. Cahalan" <acahalan@cs.uml.edu> said:

> You want to allow shellscripts with special powers?!?!?
> 
> If so, you might as well start by allowing setuid shell scripts.
> That was a massive security hole last I heard.

Exactly because it is such a security leak, it might be very useful to only
allow a _very_ specific subset of capabilities for a specific shell script
instead of making it setuid 0. Your analogy is seriously flawed, thats the
exact situation where capabilites are useful.

> Considering other formats: a.out is obsolete and newer formats will
> not be less powerful than ELF.

Probably not.

Sincerely,
    Lars Marowsky-Brée

--
Lars Marowsky-Brée
Network Management

teuto.net Netzdienste GmbH - DPN Verbund-Partner

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/