Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1753709AbbBYX7I (ORCPT ); Wed, 25 Feb 2015 18:59:08 -0500 Received: from resqmta-ch2-04v.sys.comcast.net ([69.252.207.36]:47327 "EHLO resqmta-ch2-04v.sys.comcast.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1753226AbbBYX7G (ORCPT ); Wed, 25 Feb 2015 18:59:06 -0500 Date: Wed, 25 Feb 2015 17:59:04 -0600 (CST) From: Christoph Lameter X-X-Sender: cl@gentwo.org To: Pavel Machek cc: Serge Hallyn , Serge Hallyn , Andy Lutomirski , Jonathan Corbet , Aaron Jones , "Ted Ts'o" , linux-security-module@vger.kernel.org, linux-kernel@vger.kernel.org, akpm@linuxfoundation.org, morgan@kernel.org Subject: Re: [capabilities] Allow normal inheritance for a configurable set of capabilities In-Reply-To: <20150225215014.GD29527@amd> Message-ID: References: <20150202171257.GD24351@ubuntumail> <20150225215014.GD29527@amd> Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 599 Lines: 14 On Wed, 25 Feb 2015, Pavel Machek wrote: > One solution is to put capabilities into the elf executable. I believe > there was patch for that. That means you don't need to add capability > support into filesystems... Ummm... So I can just get any caps by modifying the ELF header? Looking at the docs No, it just drops caps so binaries must be setsuid. -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/