> > Ok, that's legitimate. In such case , we'll have to modify shell to
> > understand something like --drop, so that beggining of shell would
> > look like
> > #!/bin/bash --drop NET_BIND_SERVICE
> > . Which again has nice property like surviving NFS/ftp transfers etc.
> You don't need to modify the shell.
> Simply:
> #!/bin/setcap --drop NET_BIND_SERVICE /bin/bash
Both presume an all-powerfull shell to start with.
-- Dr. Horst H. von Brand mailto:vonbrand@inf.utfsm.cl Departamento de Informatica Fono: +56 32 654431 Universidad Tecnica Federico Santa Maria +56 32 654239 Casilla 110-V, Valparaiso, Chile Fax: +56 32 797513- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.rutgers.edu Please read the FAQ at http://www.tux.org/lkml/