Re: [PATCH] capabilities: Ambient capability set V2
- From
- Christoph Lameter <hidden>
- Date
- 2015-03-06 15:50:08
- Also in
- lkml
- Reply to
- Serge E. Hallyn, 2015-03-05
On Thu, 5 Mar 2015, Serge E. Hallyn wrote:
quoted
quoted
So I'd say drop this change ^Then the ambient caps get ignored for a executables that have capabilities seton the file?Yes. Those are assumed to already know what they're doing.
Ok can we get this patch merged now if I do this change
(effectively ambient caps for binaries that have no caps set) and deal with the
other issues later? This would cover most of the use cases here at least.