Re: [PATCH] Filesystem capabilities support

Arnout Engelen
2005-07-24T13:44:22Z

Nicholas Hans Simmonds wrote:
> This is a simple attempt at providing capability support

Very good to see progress in this field. I'm not familiar with the
technical details yet, but this seems an important security feature imho.

How does this patch relate to the one at
http://www.olafdietsche.de/linux/capability ?

I do think the LD_PRELOAD / LD_LIBRARY_PATH problem (also described by
Olaf) should be mentioned in the kernel config, and fs capabilities should
remain marked EXPERIMENTAL until that's resolved.

Kind regards,

--
Arnout Engelen <arnouten@bzzt.net>

"If it sounds good, it /is/ good."
-- Duke Ellington