Messages in this thread | | | From | Andy Lutomirski <> | Date | Tue, 19 May 2015 10:20:02 -0700 | Subject | Re: [PATCH v2 1/2] capabilities: Ambient capabilities |
| |
On May 19, 2015 8:37 AM, "Christoph Lameter" <cl@linux.com> wrote: > > On Mon, 18 May 2015, Andy Lutomirski wrote: > > > > Could you provide an example to demonstrate how it is to be used? > > > Something similar to what I had in my patch? > > > > > > > Do you mean something like: > > > > setpriv --ambient-caps=+net_bind_service --inh-haps=+net_bind_service > > --euid=500 --ruid=500 bash > > Ok that means we also depend on a tool upgrade. >
I think this is unavoidable, unless we want to change the semantics of inheritable caps, and that would open a giant can of worms.
--Andy
| |