Re: [PATCH 15/19] capabilities: Allow privileged user in s_user_ns to set file caps

2015-12-04 Thread Serge E. Hallyn
On Fri, Dec 04, 2015 at 02:36:27PM -0600, Seth Forshee wrote: > On Fri, Dec 04, 2015 at 01:42:06PM -0600, Serge E. Hallyn wrote: > > Quoting Seth Forshee (seth.fors...@canonical.com): > > > A privileged user in a super block's s_user_ns is privileged > > > towards that file system and thus should

Re: [PATCH 15/19] capabilities: Allow privileged user in s_user_ns to set file caps

2015-12-04 Thread Seth Forshee
On Fri, Dec 04, 2015 at 01:42:06PM -0600, Serge E. Hallyn wrote: > Quoting Seth Forshee (seth.fors...@canonical.com): > > A privileged user in a super block's s_user_ns is privileged > > towards that file system and thus should be allowed to set file > > capabilities. The file capabilities will