Messages in this thread | | | Date | Sat, 7 Mar 2015 15:35:22 -0600 | From | "Serge E. Hallyn" <> | Subject | Re: [PATCH] capabilities: Ambient capability set V2 |
| |
On Sat, Mar 07, 2015 at 09:06:46AM -0600, Christoph Lameter wrote: > On Fri, 6 Mar 2015, Andy Lutomirski wrote: > > > > christoph@fujitsu-haswell:~$ getcap ambient_test > > > > > > ambient_test = cap_setpcap,cap_net_admin,cap_net_raw,cap_sys_nice+eip > > > > I think that's right. fI doesn't set pI. > > Ok then that is the point of pI if it cannot be set?
It can be set! Anything with CAP_SETPCAP can fill it's pI. When it and its children exec(), pI' = pI.
| |