Messages in this thread | | | Date | Wed, 15 Jul 2015 21:13:51 +1000 (AEST) | From | James Morris <> | Subject | Re: [PATCH v4 1/2] capabilities: Ambient capabilities |
| |
On Tue, 14 Jul 2015, Andy Lutomirski wrote:
> ===== The proposed change ===== > > This patch adds a fifth capability mask called the ambient mask > (pA). pA does what most people expect pI to do. >
This looks good, and I think it will lead to better overall security because people will find capabilities easier to use for real-world scenarios.
Has it had enough security review? This is a significant new behavior being added to a widely enabled security module.
- James -- James Morris <jmorris@namei.org>
| |