Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1753851AbbESRUa (ORCPT ); Tue, 19 May 2015 13:20:30 -0400 Received: from mail-la0-f44.google.com ([209.85.215.44]:33713 "EHLO mail-la0-f44.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1751489AbbESRUY (ORCPT ); Tue, 19 May 2015 13:20:24 -0400 MIME-Version: 1.0 In-Reply-To: References: From: Andy Lutomirski Date: Tue, 19 May 2015 10:20:02 -0700 Message-ID: Subject: Re: [PATCH v2 1/2] capabilities: Ambient capabilities To: Christoph Lameter Cc: Jarkko Sakkinen , "Ted Ts'o" , "Andrew G. Morgan" , Andrew Morton , Serge Hallyn , Michael Kerrisk , Mimi Zohar , Linux API , Austin S Hemmelgarn , linux-security-module , Aaron Jones , LKML , Serge Hallyn , Markku Savela , Kees Cook , Jonathan Corbet Content-Type: text/plain; charset=UTF-8 Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 830 Lines: 25 On May 19, 2015 8:37 AM, "Christoph Lameter" wrote: > > On Mon, 18 May 2015, Andy Lutomirski wrote: > > > > Could you provide an example to demonstrate how it is to be used? > > > Something similar to what I had in my patch? > > > > > > > Do you mean something like: > > > > setpriv --ambient-caps=+net_bind_service --inh-haps=+net_bind_service > > --euid=500 --ruid=500 bash > > Ok that means we also depend on a tool upgrade. > I think this is unavoidable, unless we want to change the semantics of inheritable caps, and that would open a giant can of worms. --Andy -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/