[lkml]   [2000]   [Feb]   [20]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
SubjectRe: Capabilities

> > If you want to elevate some priviledges, make it setuid 0 (that will
> > give it all capabilities) and you can now copy forced into
> > allowed. You are done. You have nice compatibility (ls) for free, and
> > you have 32 more bits for your use!
> Who says running as UID == 0 gives you all capabilities? Why have a

Backwards compatibility.

> distinguished root user at all? OTOH, it does make sense to have a program
> that can modify files belonging to DNS, and which is allowed to bind to a
> low port, but nothing else. The UID/GID (and ACL) stuff and capabilities
> are complementary.

I said that different uid is where this gets ugly ;-). Take a look at

(Program that can modify files for DNS and which is allowed to bind
low port is doable with elfcap, but not with this proposal, because
there are no additional bits to store "new uid" as I do in elfcap.
The best software in life is free (not shareware)! Pavel
GCM d? s-: !g p?:+ au- a--@ w+ v- C++@ UL+++ L++ N++ E++ W--- M- Y- R+

To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to
Please read the FAQ at

 \ /
  Last update: 2005-03-22 13:56    [W:0.111 / U:8.964 seconds]
©2003-2018 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site