Messages in this thread | | | Subject | Re: RFC: on adding new CLONE_* flags [WAS Re: [PATCH 0/4] clone: add CLONE_PIDFD] | From | "Enrico Weigelt, metux IT consult" <> | Date | Tue, 16 Apr 2019 20:37:33 +0200 |
| |
On 15.04.19 21:59, Aleksa Sarai wrote:
> Just spit-balling -- is no_new_privs not sufficient for this usecase?> Not granting privileges such as setuid during execve(2) is the main> point of that flag. Oh, I wasn't aware of that. Thanks.
--mtx
-- Enrico Weigelt, metux IT consult Free software and Linux embedded engineering info@metux.net -- +49-151-27565287
| |