> You want to allow shellscripts with special powers?!?!?
>
> If so, you might as well start by allowing setuid shell scripts.
> That was a massive security hole last I heard.
Exactly because it is such a security leak, it might be very useful to only
allow a _very_ specific subset of capabilities for a specific shell script
instead of making it setuid 0. Your analogy is seriously flawed, thats the
exact situation where capabilites are useful.
> Considering other formats: a.out is obsolete and newer formats will
> not be less powerful than ELF.
Probably not.
Sincerely,
Lars Marowsky-Brée
-- Lars Marowsky-Brée Network Managementteuto.net Netzdienste GmbH - DPN Verbund-Partner
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.rutgers.edu Please read the FAQ at http://www.tux.org/lkml/