Messages in this thread | | | Date | Mon, 18 Apr 2011 20:29:25 -0500 | From | "Serge E. Hallyn" <> | Subject | Re: Linux capabilities shouldn't be lost during setuid to non-root from root or to another non-root uid from a non-root uid. |
| |
Quoting crocket (crockabiscuit@gmail.com): > Is there an existing utility that sets SECBIT_NO_SETUID_FIXUP? > Or is there a way to set it without writing a C wrapper program?
You can use capsh (with --secbits=), which ships with libcap2.
-serge
| |