On Tue, Aug 17, 2004 at 01:13:23AM +0200, Joerg Schilling wrote: > >Linux(iirc since 2.2) supports a finer grained permission > >model than switching UID, POSIX capabilities[1]. Instead of > >"switching to/from root bracketing each SCSI command" you'd > >simply retain the necessary capability, CAP_SYS_RAWIO. cu > >andreas > > If Linux has this, why is there no documentation? Why is > there no man pages for the Linux Kernel at all?
There indeed is documentation (and man pages). Even I (not a developer of any kind to speak of) remember the original announcement (that capabilities have been implemented). The man pages are capget(2), capset(2), and capabilities(7). The capget(2) man page is dated 1999 and refers to ftp://ftp.kernel.org/pub/linux/libs/security/linux-privs which is still valid. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

