From: Chris Wright (chrisw_at_osdl.org)
Date: Thu 13 May 2004 - 19:00:27 BST

• Previous message: andrewg_at_d2.net.au: "Re: [Vserver] Capability "suid" ?"
• In reply to: Gregory (Grisha) Trubetskoy: "[Vserver] Capability "suid" ?"
• Next in thread: Liam Helmer: "Re: [Vserver] Capability "suid" ?"
• Reply: Liam Helmer: "Re: [Vserver] Capability "suid" ?"

* Gregory (Grisha) Trubetskoy (grisha_at_ispol.com) wrote:
>
> Has there been any discussion of having a feature whereby a binary would
> be executed with higher capabilities automatically?

This can be done with two ways. Normail setuid-root will elevate, and
then some LSM modules like SELinux and LIDS can define which
capabilities a program will get when it's exectued.

thanks,
-chris

-- 
Linux Security Modules     http://lsm.immunix.org     http://lsm.bkbits.net
_______________________________________________
Vserver mailing list
Vserver_at_list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver

• Previous message: andrewg_at_d2.net.au: "Re: [Vserver] Capability "suid" ?"
• In reply to: Gregory (Grisha) Trubetskoy: "[Vserver] Capability "suid" ?"
• Next in thread: Liam Helmer: "Re: [Vserver] Capability "suid" ?"
• Reply: Liam Helmer: "Re: [Vserver] Capability "suid" ?"