Messages in this thread | | | From | Andreas Gruenbacher <> | Subject | Re: [PATCH 2/2] file capabilities: remove CONFIG_SECURITY_FILE_CAPABILITIES | Date | Thu, 25 Sep 2008 03:36:27 +0200 |
| |
On Thursday, 25 September 2008 3:02:33 Serge E. Hallyn wrote: > Quoting Chris Wright (chrisw@sous-sol.org): > > What is being done to enable userspace in distros to make those 570 > > bytes generally useful? > > Fedora 9 and ubuntu intrepid already have full capabilities support and > modern libcap. Sles is set to ship with a modern libcap, and according > to what Andreas is saying, if we can provide them with the no_file_caps > boot option then suse is willing to have a kernel with capabilities > turned on.
Yes.
> I think gentoo still comes with libcap-1. Need to look into > changing that. > > I suppose the next baby-step will be to do get rid of setuid on little > things like ping.
Real file capability support in RPM seems important to me; hacking this into %post scripts is not a reasonable approach.
Thanks, Andreas
| |