Date: Fri, 20 Nov 2009 14:26:16 -0600
From: "Serge E. Hallyn" <serue@us.ibm.com>
To: linux-security-module@vger.kernel.org
Cc: Steve Grubb <sgrubb@redhat.com>, lkml <linux-kernel@vger.kernel.org>,
       Kees Cook <kees.cook@canonical.com>, Andrew Morgan <morgan@kernel.org>,
       Andreas Gruenbacher <agruen@suse.de>,
       Michael Kerrisk <mtk.manpages@gmail.com>,
       George Wilson <gcwilson@us.ibm.com>, KaiGai Kohei <kaigai@kaigai.gr.jp>
Subject: Re: [RFC] remove CONFIG_SECURITY_FILE_CAPABILITIES compile option
Message-ID: <20091120202616.GA17091@us.ibm.com>
References: <20091120201933.GA16694@us.ibm.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <20091120201933.GA16694@us.ibm.com>
User-Agent: Mutt/1.5.20 (2009-06-14)
Sender: linux-kernel-owner@vger.kernel.org
Content-Length: 627
Lines: 18

Quoting Serge E. Hallyn (serue@us.ibm.com):
> @@ -457,10 +429,8 @@ static inline int get_file_caps(struct linux_binprm *bprm, bool *effective)
>   */
>  static inline int cap_limit_ptraced_target(void)
>  {
> -#ifndef CONFIG_SECURITY_FILE_CAPABILITIES
>  	if (capable(CAP_SETPCAP))
>  		return 0;
> -#endif

Gah.  Will fix, of course, but general question/rfc still stands.

-serge
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/