Re: POSIX file capabilities for directories

2007-12-30 Thread Andrew Morgan
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Serge E. Hallyn wrote: This is not intended behavior. It should be fixed (aka such support removed). Capabilities should only be available on executable files - not directories, symlinks or anything else... So do you plan on returning an error

Re: POSIX file capabilities for directories

2007-12-28 Thread Casey Schaufler
--- Jan Engelhardt [EMAIL PROTECTED] wrote: On Dec 26 2007 16:29, Andrew Morgan wrote: I'm assuming it's unintended - or rather it's harmless but has no use - but will let Andrew respond since he may have some cool idea i haven't thought of. This is not intended behavior. It

Re: POSIX file capabilities for directories

2007-12-27 Thread Serge E. Hallyn
Quoting Andrew Morgan ([EMAIL PROTECTED]): -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Serge E. Hallyn wrote: Quoting Chris Friedhoff ([EMAIL PROTECTED]): Hello, in updating the documentation http://www.friedhoff.org/posixfilecaps.html I discovered that it is possible to

Re: POSIX file capabilities for directories

2007-12-27 Thread Jan Engelhardt
On Dec 26 2007 16:29, Andrew Morgan wrote: I'm assuming it's unintended - or rather it's harmless but has no use - but will let Andrew respond since he may have some cool idea i haven't thought of. This is not intended behavior. It should be fixed (aka such support removed). Capabilities

POSIX file capabilities for directories

2007-12-26 Thread Chris Friedhoff
Hello, in updating the documentation http://www.friedhoff.org/posixfilecaps.html I discovered that it is possible to give directories through setcap also the extended attribute capability and therefor grant them capabilities. Is this is intended or maybe not ? If it's intended, what is the

Re: POSIX file capabilities for directories

2007-12-26 Thread Serge E. Hallyn
Quoting Chris Friedhoff ([EMAIL PROTECTED]): Hello, in updating the documentation http://www.friedhoff.org/posixfilecaps.html I discovered that it is possible to give directories through setcap also the extended attribute capability and therefor grant them capabilities. Is this is intended

Re: POSIX file capabilities for directories

2007-12-26 Thread Andrew Morgan
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Serge E. Hallyn wrote: Quoting Chris Friedhoff ([EMAIL PROTECTED]): Hello, in updating the documentation http://www.friedhoff.org/posixfilecaps.html I discovered that it is possible to give directories through setcap also the extended