Problems with capabilities

Posted Jun 21, 2024 6:34 UTC (Fri) by mb (subscriber, #50428)
In reply to: Problems with capabilities by epa
Parent article: A capability set for user namespaces

> ... keeping honest people honest ...

Thanks for explaining this so nicely. This changed my view on those things a bit.

Problems with capabilities

Posted Jun 21, 2024 6:59 UTC (Fri) by Wol (subscriber, #4433) [Link]

Yup.

Back in the day when I was a noob, I ended up doing most of the sysadmin on our Pr1me mini.

I would very regularly do a "spac <sys194> system:none". In other words "set over-ride permissions root user has no access to partition sys184" - sys194 being the partition that held the operating system. Or I'd do it to the data partition.

The point being, I knew I was using commands that could seriously damage the system if they went wrong - a bit like "rm -Rf *". And I was actively protecting the system from me making a mistake ...

Cheers,
Wol