Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1758175AbbDXUTL (ORCPT ); Fri, 24 Apr 2015 16:19:11 -0400 Received: from mail-lb0-f170.google.com ([209.85.217.170]:36002 "EHLO mail-lb0-f170.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1757392AbbDXUTF (ORCPT ); Fri, 24 Apr 2015 16:19:05 -0400 MIME-Version: 1.0 In-Reply-To: References: <20150424175348.GL16377@ubuntumail> <20150424190935.GN16377@ubuntumail> From: Andy Lutomirski Date: Fri, 24 Apr 2015 13:18:44 -0700 Message-ID: Subject: Re: [RFC] capabilities: Ambient capabilities To: Christoph Lameter Cc: Serge Hallyn , Jarkko Sakkinen , Andrew Lutomirski , "Ted Ts'o" , Andrew Morton , "Andrew G. Morgan" , Linux API , Mimi Zohar , Michael Kerrisk , Austin S Hemmelgarn , linux-security-module , Aaron Jones , Serge Hallyn , LKML , Markku Savela , Kees Cook , Jonathan Corbet Content-Type: text/plain; charset=UTF-8 Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 956 Lines: 32 On Fri, Apr 24, 2015 at 1:13 PM, Christoph Lameter wrote: > On Fri, 24 Apr 2015, Andy Lutomirski wrote: > >> That's sort of what my patch does -- you need CAP_SETPCAP to switch >> the securebit. >> >> But Christoph's patch required it to add caps to the ambient set, right? > > Yes but you seem to be just adding one additional step without too much of > a benefit because you still need CAP_SETPCAP. > No, because I set the default to on :) Also, in my model you can do: $ sudo capset cap_whatever=eip something $ ./something and the program can make its cap be ambient and run a helper. In the CAP_SETPCAP model, that doesn't work. --Andy -- Andy Lutomirski AMA Capital Management, LLC -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/