Re: [PATCH] capabilities: Ambient capability set V1
- From
- Christoph Lameter <hidden>
- Date
- 2015-02-23 16:50:43
- Also in
- lkml
- Reply to
- Serge E. Hallyn, 2015-02-23
On Mon, 23 Feb 2015, Serge E. Hallyn wrote:
quoted
I do not see a problem with dropping privilege since the ambient set is supposed to be preserved across a drop of priviledge.Because you're tricking the program into thinking it has dropped the privilege, when in fact it has not.
So the cap was dropped from the cap perm set but it is still active
in the ambient set?