Messages in this thread | | | Date | Wed, 19 May 1999 20:34:37 +0200 | From | Jamie Lokier <> | Subject | Re: Capabilities done right [diff against 2.3.1] |
| |
Pavel Machek wrote: > > I may want to _strip_ shellscripts of power. > > Ok, that's legitimate. In such case , we'll have to modify shell to > understand something like --drop, so that beggining of shell would > look like > > #!/bin/bash --drop NET_BIND_SERVICE > > . Which again has nice property like surviving NFS/ftp transfers etc.
You don't need to modify the shell. Simply:
#!/bin/setcap --drop NET_BIND_SERVICE /bin/bash
-- Jamie
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.rutgers.edu Please read the FAQ at http://www.tux.org/lkml/
| |