Messages in this thread | | | From | David Howells <> | Subject | Re: [patch] file capabilities: Add no_file_caps switch | Date | Wed, 27 Aug 2008 17:13:24 +0100 |
| |
Serge E. Hallyn <serue@us.ibm.com> wrote:
> (Also note that if you have such users, you'll want to ask David Howells not > to push the patch he has floated removing the ability to pass caps to > another task altogether when CONFIG_SECURITY_FILE_CAPABILITIES=n :)
Ugh. My patch removes the ability to pass caps to another task under all circumstances because to do otherwise means that I have to make the kernel use RCU locking for a task to access its own creds. If you want this, I'll have to redo all my later patches.
David
| |