Re: [PATCH] ptrace: allow restriction of ptrace scope

Alan Cox
2010-06-17T22:31:25Z

> I don't mind putting them in commoncap at all. I would just like people
> to agree on what they disagree about. :)

I don't believe they belong in commoncap, but as something which can sit
on top of commoncap and then be dropped into by the security modules that
makes total sense.

(Really thats just the stacking debate and how to dodge it ;))

Ie you'd have

optionally:
LSMs
optionally:
cap_switches
required:
commoncap