Advertisement
Free copy of The Founder's Checklist and The Founders Pitch Deck Template from M L Bittle - New York; Advisor/Coach.
| |||||||||||||
CAP_SYS_ADMIN: the new rootCAP_SYS_ADMIN: the new rootPosted Mar 22, 2012 9:11 UTC (Thu) by kevinm (guest, #69913)In reply to: CAP_SYS_ADMIN: the new root by tialaramex Parent article: CAP_SYS_ADMIN: the new root
Absolutely agreed.
There will always be many operations which fundamentally are equivalent to root, because they can be used to subvert the kernel itself. Splitting these dangerous operations up into many different capabilities is counter-productive - they should all be under one "root-equivalent" capability. It doesn't much matter whether you call that capability CAP_SYS_ADMIN, CAP_RAWIO or CAP_AS_GOOD_AS_ROOT.
(Log in to post comments)
|
|||||||||||||