On Sat, Mar 07, 2015 at 09:06:46AM -0600, Christoph Lameter wrote:
On Fri, 6 Mar 2015, Andy Lutomirski wrote:
quoted
quoted
christoph@fujitsu-haswell:~$ getcap ambient_test
ambient_test = cap_setpcap,cap_net_admin,cap_net_raw,cap_sys_nice+eip
I think that's right. fI doesn't set pI.
Ok then that is the point of pI if it cannot be set?
It can be set! Anything with CAP_SETPCAP can fill it's pI. When
it and its children exec(), pI' = pI.