Re: capable()-function

From: Chris Wright (chris@wirex.com)
Date: Wed Oct 09 2002 - 13:22:54 EST

Next message: Alan Cox: "PATCH: first pass over the in2000"
Previous message: Petr Konecny: "Re: 2.5.41-ac1: Debug: sleeping function called from illegal context at include/asm/semaphore.h:145"
In reply to: Tony Glader: "capable()-function"
Next in thread: Tony Glader: "Re: capable()-function"
Reply: Tony Glader: "Re: capable()-function"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

* Tony Glader (Tony.Glader@blueberrysolutions.com) wrote:
> Hi!
>
> I was investigating problems with PCMCIA and found that
> capable(CAP_SYS_ADMIN) returns always false in my case. If I'm calling
> capable(CAP_SYS_ADMIN) as root - shouldn't it return true? What could
> cause this? I'm using RH 8.0 and src-rpm of 2.4.18-14 kernel.

Well, it will return true if you _have_ CAP_SYS_ADMIN capability.
Typically root has all effective capabilities (except CAP_SETPCAP).
You can check your effective capabilities in /proc/[pid]/status.
I doubt your system can't get a process with CAP_SYS_ADMIN, you'd have
trouble mounting filesystems, etc...

thanks,
-chris

-- 
Linux Security Modules     http://lsm.immunix.org     http://lsm.bkbits.net
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/

Next message: Alan Cox: "PATCH: first pass over the in2000"
Previous message: Petr Konecny: "Re: 2.5.41-ac1: Debug: sleeping function called from illegal context at include/asm/semaphore.h:145"
In reply to: Tony Glader: "capable()-function"
Next in thread: Tony Glader: "Re: capable()-function"
Reply: Tony Glader: "Re: capable()-function"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b29 : Tue Oct 15 2002 - 22:00:32 EST