Messages in this thread | | | Date | Tue, 1 Feb 2011 15:26:05 -0600 | From | "Serge E. Hallyn" <> | Subject | Re: [PATCH] System Wide Capability Bounding Set |
| |
Quoting Eric Paris (eparis@redhat.com): > What are we thinking? Any suggestions how to do what we need other than > > global bounding such that pP' = gbset & (fI | pI)
That should be sufficient for what you want.
I would however like to hear whether Andrew has had any other ideas given the broader picture.
> Or an interface in which I can force things out of the bset and pI of > other tasks? Possibly the interface could be specific to the "khelper" > thread?
No no no no no :)
thanks, -serge
| |