Re: [PATCH 3/3] CRED: Move the effective capabilities into the cred struct

Andrew Morgan <morgan@kernel.org> wrote:

> OOC If we were to simply drop support for one process changing the
> capabilities of another, would we need this patch?

Well, the patch could be less, but there's still the possibility of a kernel service wanting to override the capabilities mask.

David

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.