Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1161410AbbBDSMK (ORCPT ); Wed, 4 Feb 2015 13:12:10 -0500 Received: from resqmta-po-02v.sys.comcast.net ([96.114.154.161]:59030 "EHLO resqmta-po-02v.sys.comcast.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1753828AbbBDSMH (ORCPT ); Wed, 4 Feb 2015 13:12:07 -0500 Date: Wed, 4 Feb 2015 12:12:04 -0600 (CST) From: Christoph Lameter X-X-Sender: cl@gentwo.org To: "Serge E. Hallyn" cc: "Andrew G. Morgan" , Andy Lutomirski , Serge Hallyn , Serge Hallyn , Jonathan Corbet , Aaron Jones , "Ted Ts'o" , LSM List , lkml , Andrew Morton Subject: Re: [capabilities] Allow normal inheritance for a configurable set of capabilities In-Reply-To: <20150204173447.GA18361@mail.hallyn.com> Message-ID: References: <20150203155544.GE2923@mail.hallyn.com> <20150203172653.GB4748@mail.hallyn.com> <20150204155617.GE16726@mail.hallyn.com> <20150204173447.GA18361@mail.hallyn.com> Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 880 Lines: 18 On Wed, 4 Feb 2015, Serge E. Hallyn wrote: > Ok this is all sounding too magic for my tastes. My original suggestion > was for an actual new capability set, pA, empty by default. You can > add bits to it using prctl if ns_capable(CAP_SETPCAP) and all the new bits are > in your pE. Once set, they stay until they are removed using prctl. At > exec, pA' = pA, and fI |= pA (after reading fI from disk but before > calculating pI'). Sounds good. I think we cannot avoid the additional capability set in the cred structure since otherwise the regular ("crippled") inheritance bits may be modified and then not passed on correctly. -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/