From: "Sven Köhler" <skoehler@upb.de>
To: Valdis.Kletnieks@vt.edu
Cc: linux-kernel@vger.kernel.org
Subject: Re: why are capabilities disabled?
Date: Fri, 13 Feb 2004 18:54:53 +0100 [thread overview]
Message-ID: <402D0F6D.7090803@upb.de> (raw)
In-Reply-To: <200402131601.i1DG1Nsl020006@turing-police.cc.vt.edu>
>>"getpcaps 1" shows, that the init-process is started without
>>cap_setpcap, and i know that i can change that somehow.
>>So why are capabilities disabled? and how do i enable them?
i found the hint again: i have to change the value CAP_INIT_EFF_SET in
capability.h, so that init-process is not started with disabled
cap_setpcap, but is this still a security risk?
> There was a long thread back in October 2003 labeled:
> Subject: Re: posix capabilities inheritance
> http://marc.theaimsgroup.com/?l=linux-kernel&m=106673587410831&w=2
everybody's talking about filesystem-capabilities etc.
i still dream of starting a process with a certain capability.
next prev parent reply other threads:[~2004-02-13 18:01 UTC|newest]
Thread overview: 9+ messages / expand[flat|nested] mbox.gz Atom feed top
2004-02-13 15:29 why are capabilities disabled? Sven Köhler
2004-02-13 16:01 ` Valdis.Kletnieks
2004-02-13 17:54 ` Sven Köhler [this message]
2004-02-13 18:08 ` Valdis.Kletnieks
2004-02-13 18:22 ` Maciej Zenczykowski
2004-02-13 18:44 ` Chris Wright
2004-02-13 18:22 ` Chris Wright
-- strict thread matches above, loose matches on Subject: below --
2004-02-13 15:35 Sven Köhler
2004-02-13 18:15 ` Chris Wright
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=402D0F6D.7090803@upb.de \
--to=skoehler@upb.de \
--cc=Valdis.Kletnieks@vt.edu \
--cc=linux-kernel@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.