Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1751564AbbESUDa (ORCPT ); Tue, 19 May 2015 16:03:30 -0400 Received: from resqmta-ch2-03v.sys.comcast.net ([69.252.207.35]:44622 "EHLO resqmta-ch2-03v.sys.comcast.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1751512AbbESUD0 (ORCPT ); Tue, 19 May 2015 16:03:26 -0400 Date: Tue, 19 May 2015 15:03:23 -0500 (CDT) From: Christoph Lameter X-X-Sender: cl@gentwo.org To: Andy Lutomirski cc: Jarkko Sakkinen , "Ted Ts'o" , "Andrew G. Morgan" , Andrew Morton , Serge Hallyn , Michael Kerrisk , Mimi Zohar , Linux API , Austin S Hemmelgarn , linux-security-module , Aaron Jones , LKML , Serge Hallyn , Markku Savela , Kees Cook , Jonathan Corbet Subject: Re: [PATCH v2 1/2] capabilities: Ambient capabilities In-Reply-To: Message-ID: References: Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 989 Lines: 29 On Tue, 19 May 2015, Andy Lutomirski wrote: > On May 19, 2015 8:37 AM, "Christoph Lameter" wrote: > > > > On Mon, 18 May 2015, Andy Lutomirski wrote: > > > > > > Could you provide an example to demonstrate how it is to be used? > > > > Something similar to what I had in my patch? > > > > > > > > > > Do you mean something like: > > > > > > setpriv --ambient-caps=+net_bind_service --inh-haps=+net_bind_service > > > --euid=500 --ruid=500 bash > > > > Ok that means we also depend on a tool upgrade. > > > > I think this is unavoidable, unless we want to change the semantics of > inheritable caps, and that would open a giant can of worms. Ok then include a patch and references to that material. Or did I just not see that? -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/