Re: 2.6.6-mm2

From: Chris Wright
Date: Thu May 13 2004 - 14:52:18 EST

* Andrew Morton (akpm@xxxxxxxx) wrote:
> Chris Wright <chrisw@xxxxxxxx> wrote:
> >
> >
> > +static int capability_mask;
> > +module_param_named(mask, capability_mask, int, 0);
> > +MODULE_PARM_DESC(mask, "Mask of capability checks to ignore");
> Is there a way to make this tunable at runtime, btw?

Yeah, it'd require sysctl or similar, and further reduces the security,
unless you only allow bit clearing or something.

Linux Security Modules
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at
Please read the FAQ at