On 4/17/13 6:47 PM, "Dash Four" <mr.dash.f...@googlemail.com> wrote:

>
>>> Hmm, I am not sure I like this, simply because every time I do an
>>> update, I have to manually sync this file and I don't need this extra
>>> headache.
>>>     
>>
>> Why? If you don't change your config, you don't need new capabilities!
>>   
>Sorry, missed that. The problem is that when I compile a new kernel, I
>also tweak with the options (particularly with the Netfilter section),
>so some "capability" may be activated/deactivated (new iptables targets
>for example). \that is why I don't want to use a fixed capabilities file
>as some of the options there may be used in the new version, or removed
>if I previously used them.

Then make a habit of generating a new capabilities file when you compile a
new kernel.

-Tom
You do not need a parachute to skydive. You only need a parachute to
skydive twice.





------------------------------------------------------------------------------
Precog is a next-generation analytics platform capable of advanced
analytics on semi-structured data. The platform includes APIs for building
apps and a phenomenal toolset for data science. Developers can use
our toolset for easy data analysis & visualization. Get a free account!
http://www2.precog.com/precogplatform/slashdotnewsletter
_______________________________________________
Shorewall-devel mailing list
Shorewall-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shorewall-devel

Reply via email to