lkml.org 
[lkml]   [2015]   [Jul]   [15]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectRe: [PATCH v4 1/2] capabilities: Ambient capabilities
On Tue, 14 Jul 2015, Andy Lutomirski wrote:

> ===== The proposed change =====
>
> This patch adds a fifth capability mask called the ambient mask
> (pA). pA does what most people expect pI to do.
>

This looks good, and I think it will lead to better overall security
because people will find capabilities easier to use for real-world
scenarios.

Has it had enough security review? This is a significant new behavior
being added to a widely enabled security module.



- James
--
James Morris
<jmorris@namei.org>



\
 
 \ /
  Last update: 2015-07-15 13:41    [W:0.064 / U:0.216 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site