User: Password:
Subscribe / Log in / New account



Posted Dec 24, 2010 10:15 UTC (Fri) by trasz (guest, #45786)
In reply to: Fixing CAP_SETPCAP by zooko
Parent article: Fixing CAP_SETPCAP

@zooko: No, it's not. Linux capabilities are basically about replacing suid bits with something more fine-grained, and it doesn't improve security much, IMHO, although it's nice from the marketing point of view - "hey, look, no suids!".

In other words, Linux capabilities are about giving additional privileges to processes, and what you're asking for is about adding additional restrictions to processes.

(Log in to post comments)

Copyright © 2017, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds