Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.kernel > #1184697
| From | James Morris <jmorris@namei.org> |
|---|---|
| Newsgroups | linux.kernel |
| Subject | Re: [PATCH v4 1/2] capabilities: Ambient capabilities |
| Date | 2015-07-15 13:20 +0200 |
| Message-ID | <pMsTg-5QQ-35@gated-at.bofh.it> (permalink) |
| References | <pMenf-1AT-3@gated-at.bofh.it> <pMenf-1AT-1@gated-at.bofh.it> |
| Organization | linux.* mail to news gateway |
On Tue, 14 Jul 2015, Andy Lutomirski wrote: > ===== The proposed change ===== > > This patch adds a fifth capability mask called the ambient mask > (pA). pA does what most people expect pI to do. > This looks good, and I think it will lead to better overall security because people will find capabilities easier to use for real-world scenarios. Has it had enough security review? This is a significant new behavior being added to a widely enabled security module. - James -- James Morris <jmorris@namei.org> -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
Back to linux.kernel | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
[PATCH v4 1/2] capabilities: Ambient capabilities Andy Lutomirski <luto@kernel.org> - 2015-07-14 21:50 +0200
Re: [PATCH v4 1/2] capabilities: Ambient capabilities James Morris <jmorris@namei.org> - 2015-07-15 13:20 +0200
Re: [PATCH v4 1/2] capabilities: Ambient capabilities Kees Cook <keescook@chromium.org> - 2015-07-18 01:20 +0200
csiph-web