Il 04/04/2012 08:43, "Paweł Hajdan, Jr." ha scritto:
On 4/4/12 8:32 AM, justin wrote:
1.
Leave it to root (Fedora and Suses way)
I think that's the best option, at least for now.
2.
suid it (bad in my view)
Agreed, that'd be very bad, any crashing bug in it could become a
privilege escalation problem.
3.
file capabilities (can this be done with portage)
Slightly better than the above, but I still prefer #1.
Or default to 1. but provide a use flag to achieve 3.
net-wireless/kismet uses 'suid', maybe other use 'caps' use flags?
Hopefully others can answer on how to apply capabilities to executables
