Re: capwrap: granting capabilities without fs support

[Chris Wright]

* Andy Lutomirski (luto@xxxxxxxxxxxxx) wrote:
> When I have time (hopefully real soon now), I'll post a patch to actually fix 
> capabilities.  With that patch, this can be a trivial wrapper script instead of 
> a kernel module.  Note that this could be _very_ dangerous if glibc does the 
> wrong thing (I don't know whether it does, though).

I agree, between my patch or Andy's patch, it makes more sense to fix
capabilities to be more useable, rather than add this new module.

thanks,
-chris
-- 
Linux Security Modules     http://lsm.immunix.org     http://lsm.bkbits.net
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/