Groups | Search | Server Info | Keyboard shortcuts | Login | Register


Groups > comp.os.linux.development.apps > #654

Re: How does one use capabilities

From Jasen Betts <jasen@xnet.co.nz>
Newsgroups comp.os.linux.development.apps
Subject Re: How does one use capabilities
Date 2014-02-13 11:47 +0000
Organization JJ's own news server
Message-ID <ldibdf$r5t$1@gonzo.reversiblemaps.ath.cx> (permalink)
References <5d3aec9e-51c1-4a9a-801c-6281a8e62648@googlegroups.com> <ldffki$4q0$1@gonzo.reversiblemaps.ath.cx> <f08d472b-5692-4dfd-aa46-8e5418558186@googlegroups.com>

Show all headers | View raw


On 2014-02-12, Andrew Falanga <af300wsm@gmail.com> wrote:
>
> Capabilities: =ep
>
> I do not understand then how capabilities are set on a per process basis.  I've read enough to know that, ordinarily, a process cannot up its capabilities but can temporarily drop and then reestablish them (given they can do that).  Is this understanding correct?  How are capabilities initially set?  Is it expected that an unprivileged process should contain and empty set of capabilities?  If so, then how could *any* process do anything with their set of capabilities?

I don't either, the man pages are long and deep, and offer teach me more
than I am prepared prepared to learn at this time.

man 7 capabilities, there might be something in LPG too.

-- 
Neither the pheasant plucker, nor the pheasant plucker's son.


--- news://freenews.netfront.net/ - complaints: news@netfront.net ---

Back to comp.os.linux.development.apps | Previous | NextPrevious in thread | Next in thread | Find similar


Thread

How does one use capabilities Andrew Falanga <af300wsm@gmail.com> - 2014-02-11 17:00 -0800
  Re: How does one use capabilities Jasen Betts <jasen@xnet.co.nz> - 2014-02-12 09:41 +0000
    Re: How does one use capabilities Andrew Falanga <af300wsm@gmail.com> - 2014-02-12 13:59 -0800
      Re: How does one use capabilities Jasen Betts <jasen@xnet.co.nz> - 2014-02-13 11:47 +0000
        Re: How does one use capabilities Joe Beanfish <joebeanfish@nospam.duh> - 2014-02-13 14:12 +0000

csiph-web