From: "Sven Köhler" <skoehler@upb.de>
To: Valdis.Kletnieks@vt.edu
Cc: linux-kernel@vger.kernel.org
Subject: Re: why are capabilities disabled?
Date: Fri, 13 Feb 2004 18:54:53 +0100 [thread overview]
Message-ID: <402D0F6D.7090803@upb.de> (raw)
In-Reply-To: <200402131601.i1DG1Nsl020006@turing-police.cc.vt.edu>
>>"getpcaps 1" shows, that the init-process is started without
>>cap_setpcap, and i know that i can change that somehow.
>>So why are capabilities disabled? and how do i enable them?
i found the hint again: i have to change the value CAP_INIT_EFF_SET in
capability.h, so that init-process is not started with disabled
cap_setpcap, but is this still a security risk?
> There was a long thread back in October 2003 labeled:
> Subject: Re: posix capabilities inheritance
> http://marc.theaimsgroup.com/?l=linux-kernel&m=106673587410831&w=2
everybody's talking about filesystem-capabilities etc.
i still dream of starting a process with a certain capability.
next prev parent reply other threads:[~2004-02-13 18:01 UTC|newest]
Thread overview: 9+ messages / expand[flat|nested] mbox.gz Atom feed top
2004-02-13 15:29 why are capabilities disabled? Sven Köhler
2004-02-13 16:01 ` Valdis.Kletnieks
2004-02-13 17:54 ` Sven Köhler [this message]
2004-02-13 18:08 ` Valdis.Kletnieks
2004-02-13 18:22 ` Maciej Zenczykowski
2004-02-13 18:44 ` Chris Wright
2004-02-13 18:22 ` Chris Wright
-- strict thread matches above, loose matches on Subject: below --
2004-02-13 15:35 Sven Köhler
2004-02-13 18:15 ` Chris Wright
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=402D0F6D.7090803@upb.de \
--to=skoehler@upb.de \
--cc=Valdis.Kletnieks@vt.edu \
--cc=linux-kernel@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox