Re: POSIX file capabilities for directories

2007-12-30 Thread Andrew Morgan
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Serge E. Hallyn wrote: >> This is not intended behavior. It should be fixed (aka such support >> removed). Capabilities should only be available on executable files - >> not directories, symlinks or anything else... > > So do you plan on returning an

Re: POSIX file capabilities for directories

2007-12-28 Thread Casey Schaufler
--- Jan Engelhardt <[EMAIL PROTECTED]> wrote: > > On Dec 26 2007 16:29, Andrew Morgan wrote: > >> > >> I'm assuming it's unintended - or rather it's harmless but has no use - > >> but will let Andrew respond since he may have some cool idea i haven't > >> thought of. > > > >This is not intended

Re: POSIX file capabilities for directories

2007-12-27 Thread Jan Engelhardt
On Dec 26 2007 16:29, Andrew Morgan wrote: >> >> I'm assuming it's unintended - or rather it's harmless but has no use - >> but will let Andrew respond since he may have some cool idea i haven't >> thought of. > >This is not intended behavior. It should be fixed (aka such support >removed). Capab

Re: POSIX file capabilities for directories

2007-12-27 Thread Serge E. Hallyn
Quoting Andrew Morgan ([EMAIL PROTECTED]): > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > > > Serge E. Hallyn wrote: > > Quoting Chris Friedhoff ([EMAIL PROTECTED]): > >> Hello, > >> > >> in updating the documentation > >> http://www.friedhoff.org/posixfilecaps.html I discovered that it i

Re: POSIX file capabilities for directories

2007-12-26 Thread Andrew Morgan
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Serge E. Hallyn wrote: > Quoting Chris Friedhoff ([EMAIL PROTECTED]): >> Hello, >> >> in updating the documentation >> http://www.friedhoff.org/posixfilecaps.html I discovered that it is >> possible to give directories through setcap also the extende

Re: POSIX file capabilities for directories

2007-12-26 Thread Serge E. Hallyn
Quoting Chris Friedhoff ([EMAIL PROTECTED]): > Hello, > > in updating the documentation > http://www.friedhoff.org/posixfilecaps.html I discovered that it is > possible to give directories through setcap also the extended attribute > capability and therefor grant them capabilities. > Is this is in

POSIX file capabilities for directories

2007-12-26 Thread Chris Friedhoff
Hello, in updating the documentation http://www.friedhoff.org/posixfilecaps.html I discovered that it is possible to give directories through setcap also the extended attribute capability and therefor grant them capabilities. Is this is intended or maybe not ? If it's intended, what is the benefit