lkml.org 
[lkml]   [2004]   [Jan]   [13]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectRe: Capabilities help
* john moser (bluefoxicy@linux.net) wrote:
> I know this is working, because I checked my code over, plus the double
> chroot / fails. I can still load modules, change the system time,
> and administrate the network.

First are you sure you dropped those particular bits? Assuming you are,
what's your .config look like (esp. CONFIG_SECURITY_*)? Can you show me
that your process is dropping a capability (say from /proc/<pid>/status),
and that the capability is still enabled?

thanks,
-chris
--
Linux Security Modules http://lsm.immunix.org http://lsm.bkbits.net
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/

\
 
 \ /
  Last update: 2005-03-22 14:00    [W:0.035 / U:0.240 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site