From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1753658AbYEOFtU (ORCPT ); Thu, 15 May 2008 01:49:20 -0400 Received: (majordomo@vger.kernel.org) by vger.kernel.org id S1750894AbYEOFtE (ORCPT ); Thu, 15 May 2008 01:49:04 -0400 Received: from twinlark.arctic.org ([208.69.40.136]:46928 "EHLO twinlark.arctic.org" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1750812AbYEOFtD (ORCPT ); Thu, 15 May 2008 01:49:03 -0400 Message-ID: <482BCEB4.9050906@kernel.org> Date: Wed, 14 May 2008 22:48:36 -0700 From: Andrew Morgan User-Agent: Thunderbird 2.0.0.14 (Macintosh/20080421) MIME-Version: 1.0 To: KaiGai Kohei CC: Chris Wright , greg@kroah.com, serue@us.ibm.com, linux-security-module@vger.kernel.org, linux-kernel@vger.kernel.org Subject: Re: [PATCH 0/3] exporting capability name/code pairs (for 2.6.26) References: <47C25AE9.7080305@ak.jp.nec.com> <480DC80F.3060403@ak.jp.nec.com> <20080423053726.GF3861@localhost.localdomain> <480EE1F6.3070205@ak.jp.nec.com> <482A33FA.5030109@ak.jp.nec.com> <20080514005238.GZ17453@sequoia.sous-sol.org> <482A7F64.50705@ak.jp.nec.com> In-Reply-To: <482A7F64.50705@ak.jp.nec.com> X-Enigmail-Version: 0.95.6 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 KaiGai Kohei wrote: | For example, we got CAP_MAC_ADMIN at 2.6.25. If an application tries to | use it, we have to replace libcap for 2.6.24 by libcap for 2.6.25. | Although, we don't get any updates in libcap. :-( I'm not sure what you mean here. I think you will find that this particular capability was supported in libcap 2.03. Current is 2.09. Also, having Ack'd your proposed kernel patch, I speculatively included support for it in libcap-2.08. I will, of course, remove this support if the kernel doesn't adopt your change - or picks a different strategy... As it is, the patched kernel works nicely. :-) http://www.kernel.org/pub/linux/libs/security/linux-privs/libcap2/ Cheers Andrew -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD4DBQFIK86y+bHCR3gb8jsRAnV4AJ9gCaTwfKs8r7KX4DFixT84A5buOQCYlbaX mnMx52Yt2pRcLAXTOXElLA== =31Cy -----END PGP SIGNATURE-----