Messages in this thread | | | Date | Wed, 4 Feb 2015 10:43:14 -0600 (CST) | From | Christoph Lameter <> | Subject | Re: [capabilities] Allow normal inheritance for a configurable set of capabilities |
| |
On Wed, 4 Feb 2015, Andrew G. Morgan wrote:
> I was thinking more like this: > > int override = secure(SECURE_AMBIENT_PRIVS) && > cap_isclear(caps->inheritable.cap);
Uhh.. Then processes that require other capabilties would not pass them through anymore to other stuff that they invoke.
Also the new caps need to be set somewhere.
| |