Re: patch to make Linux capabilities into something useful (v 0.3.1)

David Madore
2006-09-08T04:00:21Z

On Thu, Sep 07, 2006 at 02:21:15PM -0400, James Antill wrote:
> Just a minor comment, can you break out the OPEN into at least
> OPEN_R, OPEN_NONFILE_W and OPEN_W (possibly OPEN_A, but I don't want
> that personally).

Version 0.4.2 of the patch, which I'm about to post to the list, adds
a CAP_REG_WRITE capability that is supposed to prevent any write
operation to the filesystem.

--
David A. Madore
(david.madore@ens.fr,
http://www.madore.org/~david/ )