Re: [PATCH 3/3] CRED: Move the effective capabilities into thecred struct

From: Trond Myklebust
Date: Thu Sep 20 2007 - 12:09:21 EST


On Thu, 2007-09-20 at 08:36 -0700, Casey Schaufler wrote:

> Ok, what can't be copied, and why can't it be copied?

In practice, no security information can be copied because the checks
are all made on the "current" pointer. There is no mechanism other than
'current' for passing security information around.

Trond
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/