Re: [PATCH] 2.6.15: Filesystem capabilities 0.16

[Olaf Dietsche]

Ingo Oeser <ioe-lkml@xxxxxxxxxx> writes:

> On Saturday 14 January 2006 22:21, Olaf Dietsche wrote:
>> This patch implements filesystem capabilities. It allows to run
>> privileged executables without the need for suid root.
>
> Why not implement this via xattr framework and the "system." 
> namespace there? I would suggest "system.posix_capabilties" for this.

This already exists. See
<http://groups.google.com/group/linux.kernel/browse_frm/thread/bbcb9a5d4204db6d/92da59d319865d7b>,
<http://groups.google.com/group/linux.kernel/browse_frm/thread/b8f2508c00c76938/d76a17c820b8a0a8>
and <http://www.stanford.edu/~luto/linux-fscap/>

> That way you can reduce your infrastructure, take advantage
> of caching features, have user space tools for viewing and changing 
> this and resize2fs works for it now or soon.
>
> What do you think?

Short (and lazy ;-) answer: <http://groups.google.com/group/linux.kernel/browse_frm/thread/6a4f4b26c110c742/83ad1d63035fd290>

Regards, Olaf.
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/