Re: [PATCH] [request for inclusion] Realtime LSM

Paul Jakma
2005-01-08T13:07:37Z

On Fri, 7 Jan 2005, Paul Davis wrote:

> capabilities work - we use them in 2.4 where a helper suid application
> gets the ball rolling, and then its child grants capabilities to new
> clients.

We use them too in Quagga. Reasonably happy with them.

Not a panacae, but far better to retain just a few capabilities, than
retaining ruid 0 (as we must on other systems).

Only issue really is "graininess" of capabilities, which i'd guess is
a double-edged sword.

regards,
--
Paul Jakma paul@clubi.ie paul@jakma.org Key ID: 64A2FF6A
Fortune:
Kill Ugly Radio
- Frank Zappa