Re: Request change in behaviour of capability inheritance.

2007-03-08 Thread rgarcia
I was reading the capabilities(7) man page. I agree with you about the language. What I am requesting is that for any file without extra attributes, the inheritable and effective set should be full. Ramon - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a m

Re: Request change in behaviour of capability inheritance.

2007-03-08 Thread Casey Schaufler
--- [EMAIL PROTECTED] wrote: > I think that the current behaviour of capability > inheritance across exec() > is not optimal. > > The current behaviour consists in all effective and > permitted capabilities > are cleared across a exec(). This is because it > seems to be intended that > in the fu

Request change in behaviour of capability inheritance.

2007-03-08 Thread rgarcia
I think that the current behaviour of capability inheritance across exec() is not optimal. The current behaviour consists in all effective and permitted capabilities are cleared across a exec(). This is because it seems to be intended that in the future the executable files have a set of "allowed"