Re: [PATCH] 2.6.23: Filesystem capabilities 0.17

From: Olaf Dietsche
Date: Thu Nov 01 2007 - 15:49:47 EST


Jan Kara <jack@xxxxxxx> writes:

>> This patch implements filesystem capabilities. It allows to
>> run privileged executables without the need for suid root.
> Hmm, is there some "design document" so that one does not have to poke
> through the code and find out what it's actually trying to do?

What do you mean with "trying to do"? I thought this is obvious, it
provides executables with filesystem capabilities.

> Also why don't you use extended attributes or store them inside the
> executable like Pavel did (you link it from your web page).

The links from my web page are there to show alternatives, nothing
else. When I started in 2002, xattr where pretty new or nonexistant.

Regards, Olaf.
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/