On Wed, 05 Nov 2003 10:29:36 +0100, Svetoslav Slavtchev wrote: >> > Still a little issue in test9-4mdk : you should compile capability >> > (CONFIG_SECURITY_CAPABILITIES=yes) in the kernel, not a module (, >> > otherwise bind can't be started until "capability" module is loaded.. >> >> thanks, it will be done in next release > > please don't, > the kernel is bug enough > > not everybody is running bind, > the one's that do run it could > just add it to modprobe preload
No, it is WRONG to do so, because capset is a glibc function and should ALWAYS work.. We can't be sure another program is not using capget/capset other thank bind.. -- Frederic Crozat MandrakeSoft
