Re: [patch] sched_[set|get]_affinity() syscall, 2.4.15-pre9

Robert Love
2001-11-23T01:25:44Z

On Thu, 2001-11-22 at 20:11, Andreas Dilger wrote:

> Rather use something else, like CAP_SYS_NICE. It ties in with the idea
> of scheduling, and doesn't further abuse the CAP_SYS_ADMIN capability.
> CAP_SYS_ADMIN, while it has a good name, has become the catch-all of
> capabilities, and if you have it, it is nearly the keys to the kingdom,
> just like root.

Ah, forgot about CAP_SYS_NICE ... indeed, a better idea. I suppose if
people want it a CAP_SYS_CPU_AFFINITY could do, but this is a simple and
rare enough task that we are better off sticking it under something
else.

Robert Love