Re: [PATCH 2/2] exit_notify: kill the wrong capable(CAP_KILL) check

Roland McGrath
2009-02-25T19:48:45Z

> I can't understand why exit_notify() checks capable(CAP_KILL), but this
> looks just wrong.

I don't know either why it's there. My guess is that it was not actually
thought out specifically, just a "unless capable" exception added when the
security-motivated exclusions (exec_id stuff) were added.

I can't think of any reason not to drop this check.

Thanks,
Roland