The "CAP_SYS_MODULE" thing needs to change, I think.
We simply cannot allow user-space to do this AT ALL, even root by mistake.
Sure, root can do other damage, but we should never allow root to do
things that simply cannot make sense from an internal consistency
- remove the CAP_SYS_MODULE etc checking altogether
- make sys_clone() just always mask that bit off.
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to firstname.lastname@example.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/