[lkml]   [1999]   [May]   [21]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
SubjectRe: Capabilities done right [diff against 2.3.1]
On Thu, 20 May 1999, Bernd Eckenfels wrote:
> In article <> you wrote:
> >> #!/bin/bash --drop NET_BIND_SERVICE
> > Great. Now the default shell is all-powerful.
> No, it inherits the powers of the user...
> btw: is there a tool for setting and clearing caps, for switching in secure
> mode (as i see from the source, the securelevel isnt used, its an exported
> symbol?)
There are tools for setting and clearing at
I also mirror that at my place below and have some extensions to it.
securebits has nothing to change it in the kernel AFAIK. In my patches I
add a new securebit and let you config at compile time the securebits.
I was going to make the securebits a per task thing but I chickened out of

Any caps I mention are *derived* from a withdrawn draft posix document.
See for more info.

To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to
Please read the FAQ at

 \ /
  Last update: 2005-03-22 13:51    [W:0.035 / U:0.408 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site