Re: [PATCH 3/4] capability: Create a new capability CAP_SIGNED

James Morris
2013-03-20T05:08:05Z

On Fri, 15 Mar 2013, Casey Schaufler wrote:

> Capabilities aren't just random attribute bits. They
> indicate that a task has permission to violate a
> system policy (e.g. change the mode bits of a file
> the user doesn't own).

Casey's right here, as well he should be.

--
James Morris
<jmorris@namei.org>