* [PATCH 08/90] policycoreutils: newrole: FIXME do not drop
@ 2012-06-01 18:57 Daniel J Walsh
0 siblings, 0 replies; only message in thread
From: Daniel J Walsh @ 2012-06-01 18:57 UTC (permalink / raw)
To: eparis; +Cc: selinux
[-- Attachment #1: Type: text/plain, Size: 554 bytes --]
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
This patch looks good to me. acked.
If you run newrole as root and it drops capabilities, the next shell script
does not have any capabilities and can not function.
newrole -L TopSecret
Would end up with a root shell and no capabilities.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
iEYEARECAAYFAk/JEIgACgkQrlYvE4MpobPH9ACfUrUOvNr3QavxkJrGHxPlf6fC
wh0An2y3xa3Ns71EtaaiiU9BUC0X9bEY
=Davq
-----END PGP SIGNATURE-----
[-- Warning: decoded text below may be mangled, UTF-8 assumed --]
[-- Attachment #2: 0008-policycoreutils-newrole-FIXME-do-not-drop-capabiliti.patch --]
[-- Type: text/x-patch; name="0008-policycoreutils-newrole-FIXME-do-not-drop-capabiliti.patch", Size: 0 bytes --]
^ permalink raw reply [flat|nested] only message in thread
only message in thread, other threads:[~2012-06-01 18:57 UTC | newest]
Thread overview: (only message) (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2012-06-01 18:57 [PATCH 08/90] policycoreutils: newrole: FIXME do not drop Daniel J Walsh
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.