# Re: \[PATCH\] capabilities: Ambient capability set V1

- From: Andy Lutomirski \<luto@amacapital.net\>
- Date: 2015-02-23 15:45:18 
- List: linux-api
- Page: https://ratatoskr.run/linux-api/2015/02/4435731
- Thread: https://ratatoskr.run/linux-api/2015/02/4426512/t.md

```text
On Mon, Feb 23, 2015 at 6:58 AM, Christoph Lameter [ref] wrote:
> Ok 4.0-rc1 is out and this patch has been sitting here for a couple of
> weeks without comment after an intensive discussion about the RFCs.
>
> Since there were no objections: Is there any chance to get this into -next
> somehow?
>

At the very least, I think it needs to define and implement what
happens when a cap is added to ambient and then dropped from
permitted. We also may need LSM_UNSAFE_something to clear the ambient
set to avoid a major security issue.

I'd like to discuss (in the hallway if nothing else) at LSF/MM with
whatever other interested people will be there.

--Andy

-- 
Andy Lutomirski
AMA Capital Management, LLC
```