Linux has file-flags too

Linux has file-flags too

Posted May 9, 2004 22:28 UTC (Sun) by sweikart (guest, #4276)
In reply to: Linux has file-flags too by sweikart
Parent article: OpenBSD 3.5: a peek at another free Unix

> With a Linux kernel, you can prevent clearing these flags by
> dropping CAP_LINUX_IMMUTABLE from the Capability Bounding Set
> by doing:
>
>  echo 0xFFFEFFFF ?> /proc/sys/kernel/cap-bound

Oops, I copied this line of code from the LWN article, and forgot to change it to drop CAP_LINUX_IMMUTABLE (the example above drops CAP_SYS_MODULE). To drop CAP_LINUX_IMMUTABLE, do

  echo 0xFFFFFDFF ?> /proc/sys/kernel/cap-bound

---

(Log in to post comments)