Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1754143AbbBZV3s (ORCPT ); Thu, 26 Feb 2015 16:29:48 -0500 Received: from resqmta-ch2-06v.sys.comcast.net ([69.252.207.38]:57954 "EHLO resqmta-ch2-06v.sys.comcast.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1753969AbbBZV3q (ORCPT ); Thu, 26 Feb 2015 16:29:46 -0500 Date: Thu, 26 Feb 2015 15:29:44 -0600 (CST) From: Christoph Lameter X-X-Sender: cl@gentwo.org To: Andy Lutomirski cc: "Serge E. Hallyn" , Serge Hallyn , Serge Hallyn , Aaron Jones , "Ted Ts'o" , LSM List , Andrew Morton , "Andrew G. Morgan" , Mimi Zohar , Austin S Hemmelgarn , Markku Savela , Jarkko Sakkinen , "linux-kernel@vger.kernel.org" , Linux API , Michael Kerrisk , Jonathan Corbet Subject: Re: [PATCH] capabilities: Ambient capability set V1 In-Reply-To: Message-ID: References: <20150224164429.GB29685@ubuntumail> <20150225033247.GC29685@ubuntumail> <20150226153524.GC15182@mail.hallyn.com> <20150226193200.GA17709@mail.hallyn.com> <20150226203405.GB18926@mail.hallyn.com> <20150226205512.GA19273@mail.hallyn.com> Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 783 Lines: 16 On Thu, 26 Feb 2015, Andy Lutomirski wrote: > I'm still extremely nervous about allowing nonempty pA to propagate to > setuid or nonzero fP programs. It's less obviously dangerous if pA is > never a superset of pP, but it could still cause problems with setuid > programs that execute intentionally deprivileged helpers. Well but the intend of the ambient caps is that all processes spawned have those caps. So they should not be dropped implicitly by othe mechanisms because they could spawn scripts etc that need these privs again. -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/