Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S964981AbbD0O4A (ORCPT ); Mon, 27 Apr 2015 10:56:00 -0400 Received: from resqmta-ch2-06v.sys.comcast.net ([69.252.207.38]:47184 "EHLO resqmta-ch2-06v.sys.comcast.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S964879AbbD0Ozy (ORCPT ); Mon, 27 Apr 2015 10:55:54 -0400 Date: Mon, 27 Apr 2015 09:55:51 -0500 (CDT) From: Christoph Lameter X-X-Sender: cl@gentwo.org To: Andy Lutomirski cc: Serge Hallyn , Jarkko Sakkinen , Andrew Lutomirski , "Ted Ts'o" , Andrew Morton , "Andrew G. Morgan" , Linux API , Mimi Zohar , Michael Kerrisk , Austin S Hemmelgarn , linux-security-module , Aaron Jones , Serge Hallyn , LKML , Markku Savela , Kees Cook , Jonathan Corbet Subject: Re: [RFC] capabilities: Ambient capabilities In-Reply-To: Message-ID: References: <20150424175348.GL16377@ubuntumail> <20150424190935.GN16377@ubuntumail> Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 613 Lines: 17 On Fri, 24 Apr 2015, Andy Lutomirski wrote: > Also, in my model you can do: > > $ sudo capset cap_whatever=eip something > $ ./something > > and the program can make its cap be ambient and run a helper. In the > CAP_SETPCAP model, that doesn't work. Dont see too much difference in setting caps and CAP_SETPCAP on "./something" to allow it to set the ambient caps. -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/