Re: [B.A.T.M.A.N.] [PATCH] alfred: Drop capabilities when not needed

Simon Wunderlich
2015-02-28T22:36:31Z

[-- Attachment #1: Type: text/plain, Size: 529 bytes --]

On Saturday 28 February 2015 21:04:19 MK wrote:
> Hi!
>
> Thanks for the patch. Setup seems to be still working. How can I verify that
> privileges really dropped?
>
> There are further questions:
>
> Is _read_ access for the alfred user (resp. group) sufficient in
> /sys/kernel/debug/batman_adv/* ?
> Or is write access on the socket file in this directory mandatory for full
> functionality?

Read functionality should be enough. We are only reading the originator table
and (global) translation table.

Cheers,
Simon

[-- Attachment #2: This is a digitally signed message part. --]
[-- Type: application/pgp-signature, Size: 181 bytes --]