Re: [PATCH] capabilities: introduce per-process capabilitybounding set (v10)

From: Serge E. Hallyn
Date: Tue Nov 27 2007 - 13:42:32 EST


Quoting Andrew Morgan (morgan@xxxxxxxxxx):
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> This looks good to me.
>
> [As you anticipated, there is a potential merge issue with Casey's
> recent addition of MAC capabilities - which will make CAP_MAC_ADMIN the
> highest allocated capability: ie.,
>
> #define CAP_LAST_CAP CAP_MAC_ADMIN
>
> ].
>
> Signed-off-by: Andrew G. Morgan <morgan@xxxxxxxxxx>

Thanks, Andrew.

Yes, the following patch will be needed on top of the previous one:

-serge