Re: [capabilities] Allow normal inheritance for a configurable set of capabilities

Christoph Lameter
2015-02-25T23:59:08Z

On Wed, 25 Feb 2015, Pavel Machek wrote:

> One solution is to put capabilities into the elf executable. I believe
> there was patch for that. That means you don't need to add capability
> support into filesystems...

Ummm... So I can just get any caps by modifying the ELF header?
Looking at the docs No, it just drops caps so binaries must be
setsuid.