Re: disable-cap-mlock

Andrew Morton
2004-04-02T02:45:17Z

Chris Wright <chrisw@osdl.org> wrote:
>
> * Andrew Morton (akpm@osdl.org) wrote:
> > Andrea Arcangeli <andrea@suse.de> wrote:
> > > just curious, how does this work through 'su'? Does su check
> > > logincap.conf too?
> >
> > I guess so.
>
> Or let pam_cap do it so you don't have to modify all the apps just the pam
> confs.

Well the message I'm receiving is that the userspace capability
infrastructure is a decrepit mess which nobody is fixing or maintaining.

Certainly, if we could arrange for pam_cap to be fixed and proselytized
that would be even better than bolting new workalike code into login and
su.