For passwd:

chmod -s /bin/passwd
setcap CAP_DAC_OVERRIDE,CAP_SETUID=ep /bin/passwd

linux/capability.h doesn't specifically say it, but CAP_DAC_OVERRIDE bypasses 
rwx checking on all files.

robert

Attachment: pgppDeauqaqDl.pgp
Description: PGP signature

-- 
http://linuxfromscratch.org/mailman/listinfo/hlfs-dev
FAQ: http://www.linuxfromscratch.org/faq/
Unsubscribe: See the above information page

Reply via email to