Messages in this thread | | | Date | Fri, 7 Jan 2005 12:05:00 -0800 | From | Matt Mackall <> | Subject | Re: [PATCH] [request for inclusion] Realtime LSM |
| |
On Fri, Jan 07, 2005 at 01:55:09AM +0000, Alan Cox wrote: > On Gwe, 2005-01-07 at 01:13, Matt Mackall wrote: > > You can't fix them without changing the semantics for existing users > > in ways they didn't expect. It could be done with a new personality flag, > > but.. > > I disagree. At the most trivial you could just add another 32bits of > sticky capability that are never touched by setuid/non-setuidness and > represent additional "user" (or more rightly session) abilities to do > limited overrides
I think we're referring to different brokenness. The problems I see are with the semantics of inheritance of capabilities which make wrapping applications painful. Those can't be changed without creating holes in existing apps so the general utility of caps is limited.
-- Mathematics is the supreme nostalgia of our time. - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |