Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1761378AbYBGDZ6 (ORCPT ); Wed, 6 Feb 2008 22:25:58 -0500 Received: (majordomo@vger.kernel.org) by vger.kernel.org id S1759191AbYBGDZs (ORCPT ); Wed, 6 Feb 2008 22:25:48 -0500 Received: from smtp106.sbc.mail.re2.yahoo.com ([68.142.229.99]:24867 "HELO smtp106.sbc.mail.re2.yahoo.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with SMTP id S1759162AbYBGDZr (ORCPT ); Wed, 6 Feb 2008 22:25:47 -0500 X-YMail-OSG: Ge.mUlEVM1kAc9Xqfo1tA1TcGzTKLU3qgNd6Fbwz1.ZlaSBcalQSDU1hpzMEbAVKnJIZ9_DWsM5gAeBPnXW8PNOiI9mTrlsZBkyOPwIllvfoNgEGA54FseHjdaw3_1mIvlDXzf6A3ZFXc4ITrpk6JXjb X-Yahoo-Newman-Property: ymail-3 Date: Wed, 6 Feb 2008 21:23:31 -0600 From: serge@hallyn.com To: Jeff Chua Cc: Jan Engelhardt , lkml , Andrew Morgan Subject: Re: where is the capset kernel module? Message-ID: <20080207032331.GA25762@vino.hallyn.com> References: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.5.16 (2007-06-09) Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 1364 Lines: 34 Quoting Jeff Chua (jeff.chua.linux@gmail.com): > On Feb 6, 2008 7:40 PM, Jan Engelhardt wrote: > > > >warning: `named' uses 32-bit capabilities (legacy support in use) > > Yes it is a really interesting case I have seen before, > > but did not bother to investigate. > > CONFIG_SECURITY=y > > CONFIG_SECURITY_CAPABILITIES=m or y > > Tried, but didn't help. > > Menuconfig can't select these as modules. So may be that's they need > to be make modular. > > [*] Enable different security models > [*] Socket and Networking Security Hooks (NEW) > [*] Default Linux Capabilities (NEW) > [*] File POSIX Capabilities (EXPERIMENTAL) > [ ] Root Plug Support (NEW) Odd, I thought the help text was originally far more helpful, including a url. The message isn't telling you you need a kernel module, but that you are using an old libcap. It isn't a real problem right now if you're not using the SMACK LSM, but to get rid of the message upgrade your libcap from http://www.kernel.org/pub/linux/libs/security/linux-privs/kernel-2.6/libcap-2.05.tar.gz thanks, -serge -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/