That would come out as fixing the nosuid flag to no-[capability list]
> allowed set to give processes capabilities. On that system, the
> inheritable bitmask will work exactly like the bounding set.
Except for revocation of existing rights. Which is sort of bad practice
as the revoked rights may leave an object with items gained before
revocation.. Ok yes I can live with that limit
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu