Dropping the capability CAP_FSETID by itself does not work (and that
is probably correct), but when I drop CAP_CHOWN, CAP_FSETID works for
the group id, but not user id. I guess this is a bug (ref
include/linux/capability.h).
It does not look like dropping the CAP_SETGID (dropping CAP_SETGID
works in combination with dropping CAP_CHOWN) and CAP_SETUID works
either. Maybe they need to be dropped in combination with some other
capability? If so, it shod be more clear in the documentation
(cabability.h).
--
Knut Olav Bøhmer
_ _
/ / (_)__ __ ____ __
/ /__/ / _ \/ // /\ \/ / ... The choice of a
/____/_/_//_/\.,_/ /_/\.\ GNU generation
export PAGER="od -x |less"
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/