Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S261482AbVAGQI2 (ORCPT ); Fri, 7 Jan 2005 11:08:28 -0500 Received: (majordomo@vger.kernel.org) by vger.kernel.org id S261481AbVAGQI1 (ORCPT ); Fri, 7 Jan 2005 11:08:27 -0500 Received: from albireo.ucw.cz ([81.27.203.89]:52611 "EHLO albireo.ucw.cz") by vger.kernel.org with ESMTP id S261480AbVAGQIK (ORCPT ); Fri, 7 Jan 2005 11:08:10 -0500 Date: Fri, 7 Jan 2005 17:08:08 +0100 From: Martin Mares To: Paul Davis Cc: Christoph Hellwig , Arjan van de Ven , Lee Revell , Ingo Molnar , Chris Wright , Alan Cox , "Jack O'Quin" , Linux Kernel Mailing List , Andrew Morton Subject: Re: [PATCH] [request for inclusion] Realtime LSM Message-ID: <20050107160808.GB6529@ucw.cz> References: <20050107144718.GB9606@infradead.org> <200501071526.j07FQG2g018486@localhost.localdomain> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <200501071526.j07FQG2g018486@localhost.localdomain> User-Agent: Mutt/1.3.28i Sender: linux-kernel-owner@vger.kernel.org X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 912 Lines: 22 Hello! > Olaf: > ----- > Capabilities don't work, because of missing filesystem > capabilities. If you have them, it's a question of setting the > appropriate permitted, inheritable and effective capability sets. Sure, filesystem capabilities would be nice, but for the stuff Paul mentions they aren't needed -- what you need is to grant capabilities to the user's session, which can be easily done by a PAM module. Have a nice fortnight -- Martin `MJ' Mares http://atrey.karlin.mff.cuni.cz/~mj/ Faculty of Math and Physics, Charles University, Prague, Czech Rep., Earth "C++: an octopus made by nailing extra legs onto a dog." -- Steve Taylor - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/