Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id ; Wed, 9 Oct 2002 14:25:40 -0400 Received: (majordomo@vger.kernel.org) by vger.kernel.org id ; Wed, 9 Oct 2002 14:25:40 -0400 Received: from cerebus.wirex.com ([65.102.14.138]:50427 "EHLO figure1.int.wirex.com") by vger.kernel.org with ESMTP id ; Wed, 9 Oct 2002 14:25:35 -0400 Date: Wed, 9 Oct 2002 11:22:54 -0700 From: Chris Wright To: Tony Glader Cc: linux-kernel@vger.kernel.org Subject: Re: capable()-function Message-ID: <20021009112254.A25393@figure1.int.wirex.com> Mail-Followup-To: Tony Glader , linux-kernel@vger.kernel.org References: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: ; from Tony.Glader@blueberrysolutions.com on Wed, Oct 09, 2002 at 10:51:50AM +0300 Sender: linux-kernel-owner@vger.kernel.org X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 983 Lines: 23 * Tony Glader (Tony.Glader@blueberrysolutions.com) wrote: > Hi! > > I was investigating problems with PCMCIA and found that > capable(CAP_SYS_ADMIN) returns always false in my case. If I'm calling > capable(CAP_SYS_ADMIN) as root - shouldn't it return true? What could > cause this? I'm using RH 8.0 and src-rpm of 2.4.18-14 kernel. Well, it will return true if you _have_ CAP_SYS_ADMIN capability. Typically root has all effective capabilities (except CAP_SETPCAP). You can check your effective capabilities in /proc/[pid]/status. I doubt your system can't get a process with CAP_SYS_ADMIN, you'd have trouble mounting filesystems, etc... thanks, -chris -- Linux Security Modules http://lsm.immunix.org http://lsm.bkbits.net - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/