CAPs

[Ilmar S. Habibulin]

I'm trying to implement capabilities in freebsd using Andrew Morgans'
library. We have some technical problems with new attributes storage right
now. There is no space in the inode avaliable. So i'm concentraiting on
process capabilities.

While implementing cap_set_proc() function(actually it is a syscall) i've
confused - i just do not understand who can set up capability - user, and
who set up initial state of process capabilities? What is the initial
state of process capabilities?

Linux has CAP_SETPCAP capability, which allows user to change any
capability. POSIX doesn't has it. So how should i implement it?


To Unsubscribe: send mail to majordomo at cyrus.watson.org
with "unsubscribe posix1e" in the body of the message