lkml.org 
[lkml]   [2008]   [Sep]   [23]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
SubjectRe: [PATCH 1/2] file capabilities: add no_file_caps switch (v2)
From
Date

Andreas Gruenbacher <agruen@suse.de> writes:

> Sure, that would work as well, except that I think that file
> capabilities should always default to "on" as they will become a
> standard security mechanism before long. We just don't have much
> system management tool support yet, and I would like to give that
> some more time safely, without putting users at unnecessary risk.

As I've said elsewhere, I consider above a bad move. The "file
capabilities" are just setgid/setuid executables in disguise (although
with little finer control).

I would prefer two choices for capabilities:

1) file capabilities, for those who think they work

2) no file capabilities, but just normal inheritance. There should be
nothing mystical about this. The credential (uid, groups) inherit
just fine without problems. Why not capabilities?




\
 
 \ /
  Last update: 2008-09-23 09:25    [W:0.816 / U:0.020 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site