Re: [PATCH] capabilities: Ambient capability set V2

On Sat, Mar 07, 2015 at 09:06:46AM -0600, Christoph Lameter wrote:

On Fri, 6 Mar 2015, Andy Lutomirski wrote:

quoted

quoted

christoph@fujitsu-haswell:~$ getcap ambient_test

ambient_test = cap_setpcap,cap_net_admin,cap_net_raw,cap_sys_nice+eip

I think that's right.  fI doesn't set pI.

Ok then that is the point of pI if it cannot be set?

It can be set!  Anything with CAP_SETPCAP can fill it's pI.  When
it and its children exec(), pI' = pI.