Messages in this thread | | | Date | Thu, 17 Jun 2010 23:34:06 +0100 | From | Alan Cox <> | Subject | Re: [PATCH] ptrace: allow restriction of ptrace scope |
| |
> I don't mind putting them in commoncap at all. I would just like people > to agree on what they disagree about. :)
I don't believe they belong in commoncap, but as something which can sit on top of commoncap and then be dropped into by the security modules that makes total sense.
(Really thats just the stacking debate and how to dodge it ;))
Ie you'd have
optionally: LSMs optionally: cap_switches required: commoncap
| |