[lkml]   [2005]   [Jun]   [8]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
SubjectRe: [PATCH] capabilities not inherited
* Alexander Nyberg ( wrote:
> btw since the last discussion was about not changing the existing
> interface and thus exposing security flaws, what about introducing
> another prctrl that says maybe PRCTRL_ACROSS_EXECVE?

It's not ideal (as you mention, mess upon mess), but maybe it is the
sanest way to go forward.

> Any new user-space applications must understand the implications of
> using it so it's safe in that aspect. Yes?

At least less-likely to surprise ;-)

Linux Security Modules
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to
More majordomo info at
Please read the FAQ at

 \ /
  Last update: 2005-06-09 00:02    [from the cache]
©2003-2014 Jasper Spaans. hosted at Digital Ocean