Re: quantum capabilities

[Pavel Machek]

On Wed 19-04-06 17:01:53, Lukasz Stelmach wrote:
> Greetings All.
> 
> I've found a strange phenomenon associated with capabilities. It seems to be a
> quantum like.
> 
> when I run (as root)
> 
> delfin:~# /usr/sbin/execcap '= cap_net_raw=ep' /bin/sh -c 'getpcaps $$'
> Capabilities for `2438': =ep cap_setpcap-ep
> 
> I don't know what really happens to those capablities I zero. And I can't really
> figure out for when I try the wavefunction collapses
> 
> delfin:~# strace -o /dev/null /usr/sbin/execcap '= cap_net_raw=ep' /bin/sh -c \
> 'getpcaps $$'
> Capabilities for `2461': = cap_net_raw+ep
> 
> Strange isn't it? Does it mean that processes can't really drop their privileges?

Is execcap setuid? strace does not work over setuid...


						Pavel

-- 
Thanks, Sharp!
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/