Capabilities and the sticky bit

James Buster bitbug at seal.engr.sgi.com
Thu Sep 7 22:21:44 GMT 2000


On Sep 7,  1:48pm, Robert Watson wrote:
} The capabilities draft makes no mention of the sticky bit in its
} discussion of interections between various capabilities, discretionary,
} and mandatory access control policies.

On Irix, you need CAP_DAC_WRITE to remove a file you don't own when
the sticky bit is set.

-- 
---
Bye,
		James
To Unsubscribe: send mail to majordomo at cyrus.watson.org
with "unsubscribe posix1e" in the body of the message



More information about the posix1e mailing list