Re: disable-cap-mlock

Chris Wright
2004-04-02T01:59:19Z

* Andrew Morton (akpm@osdl.org) wrote:
> Rumour has it that the more exhasperated among us are brewing up a patch to
> login.c which will allow capabilities to be retained after the setuid. So
> you do
>
> echo "oracle CAP_IPC_LOCK" > /etc/logincap.conf
>
> And that's it.
>
> See any reason why this won't work?

Looks ok, and sounds very similar to what pam_cap does.

thanks,
-chris
--
Linux Security Modules http://lsm.immunix.org http://lsm.bkbits.net