quantum capabilities

quantum capabilities

[Lukasz Stelmach]

[-- Attachment #1: Type: text/plain, Size: 795 bytes --]

Greetings All.

I've found a strange phenomenon associated with capabilities. It seems to be a
quantum like.

when I run (as root)

delfin:~# /usr/sbin/execcap '= cap_net_raw=ep' /bin/sh -c 'getpcaps $$'
Capabilities for `2438': =ep cap_setpcap-ep

I don't know what really happens to those capablities I zero. And I can't really
figure out for when I try the wavefunction collapses

delfin:~# strace -o /dev/null /usr/sbin/execcap '= cap_net_raw=ep' /bin/sh -c \
'getpcaps $$'
Capabilities for `2461': = cap_net_raw+ep

Strange isn't it? Does it mean that processes can't really drop their privileges?

please CC.
-- 
Było mi bardzo miło.                    Czwarta pospolita klęska, [...]
>Łukasz<                      Już nie katolicka lecz złodziejska.  (c)PP


[-- Attachment #2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 254 bytes --]

Re: quantum capabilities

[Pavel Machek]

On Wed 19-04-06 17:01:53, Lukasz Stelmach wrote:
> Greetings All.
> 
> I've found a strange phenomenon associated with capabilities. It seems to be a
> quantum like.
> 
> when I run (as root)
> 
> delfin:~# /usr/sbin/execcap '= cap_net_raw=ep' /bin/sh -c 'getpcaps $$'
> Capabilities for `2438': =ep cap_setpcap-ep
> 
> I don't know what really happens to those capablities I zero. And I can't really
> figure out for when I try the wavefunction collapses
> 
> delfin:~# strace -o /dev/null /usr/sbin/execcap '= cap_net_raw=ep' /bin/sh -c \
> 'getpcaps $$'
> Capabilities for `2461': = cap_net_raw+ep
> 
> Strange isn't it? Does it mean that processes can't really drop their privileges?

Is execcap setuid? strace does not work over setuid...


						Pavel

-- 
Thanks, Sharp!

Re: quantum capabilities

[Lukasz Stelmach]

[-- Attachment #1: Type: text/plain, Size: 1073 bytes --]

Pavel Machek wrote:
> On Wed 19-04-06 17:01:53, Lukasz Stelmach wrote:
>> Greetings All.
>>
>> I've found a strange phenomenon associated with capabilities. It seems to be a
>> quantum like.
>>
>> when I run (as root)
>>
>> delfin:~# /usr/sbin/execcap '= cap_net_raw=ep' /bin/sh -c 'getpcaps $$'
>> Capabilities for `2438': =ep cap_setpcap-ep
>>
>> I don't know what really happens to those capablities I zero. And I can't really
>> figure out for when I try the wavefunction collapses
>>
>> delfin:~# strace -o /dev/null /usr/sbin/execcap '= cap_net_raw=ep' /bin/sh -c \
>> 'getpcaps $$'
>> Capabilities for `2461': = cap_net_raw+ep
>>
>> Strange isn't it? Does it mean that processes can't really drop their privileges?
> 
> Is execcap setuid? strace does not work over setuid...

No it's not. And even if it was it sholudn't make any difference when I run
execcap logged in as root.

-- 
Było mi bardzo miło.                    Czwarta pospolita klęska, [...]
>Łukasz<                      Już nie katolicka lecz złodziejska.  (c)PP


[-- Attachment #2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 254 bytes --]