Re: Is CAP_SYS_ADMIN checked by every program !?

From: Valdis . Kletnieks
Date: Thu Dec 30 2004 - 00:47:52 EST


On Thu, 30 Dec 2004 00:35:06 EST, Kyle Moffett said:

> Yes, whenever anything on the computer, including the kernel, checks if
> a program
> has a capability bit set, it will print out whether or not it does in
> the dmesg. Why
> does that matter?

If you actually log your kernel messages it can matter, if every single
process suddenly starts dumping a line in your syslogs, especially on a
busy system...

Attachment: pgp00000.pgp
Description: PGP signature