MAC question again

[James Buster]

On Sep 29,  7:33am, "Ilmar S. Habibulin" wrote:
} Ok. This is chmod() & chown().

Chown is not really an access control call.

} And what about mac_set_fd() & mac_set_file()? Who can use this calls -
} owner and suser, no? So what's the difference?

Either is only useable by a user with appropriate privilege (and since
it's the 1e list, the appropriate capabilities are CAP_MAC_DOWNGRADE and
CAP_MAC_UPGRADE.

-- 
Planet Bog -- pools of toxic chemicals bubble under a choking
atomsphere of poisonous gases... but aside from that, it's not
much like Earth.
To Unsubscribe: send mail to majordomo at cyrus.watson.org
with "unsubscribe posix1e" in the body of the message