Granting a capability to a service

Andrew Lutomirski luto at mit.edu
Wed Jul 22 20:28:25 UTC 2015


On Wed, Jul 22, 2015 at 1:22 PM, Lennart Poettering
<mzerqung at 0pointer.de> wrote:
> What's worse is that in kernels before 2.6.24 passing caps across
> exec() actually worked fine. Kernel broke API heavily in this regard
> by introducing fcaps and altering the caps inheritance logic then.

Are you sure?  I don't recall it ever working.

--Andy


More information about the devel mailing list