Messages in this thread | | | Date | Tue, 19 May 2015 20:22:17 +0000 | From | Aaron Jones <> | Subject | Re: [PATCH v2 1/2] capabilities: Ambient capabilities |
| |
On 19/05/15 20:07, Andy Lutomirski wrote:> It's in the cover letter, rather vaguely. I think I want to change > the setpriv syntax a bit before sending it upstream, though -- it's > sucks that you have to duplicate the option. > > Perhaps the ambient-caps option should implicitly raise inheritable > caps if they're not already raised. Or maybe the absence of an > inh-caps rule should cause any requested ambient caps to be made > inheritable as well. > > --Andy
I propose an additional --ambient-inh option to copy everything from --inh-caps to the ambient set. Explicit is better than implicit.
-- Aaron Jones
| |