Yaron Sheffer wrote:
> it's somewhat cleaner to have all the security-critical settings in
> one place: owner, group, permissions, capabilities (and grep for "-P"
> or "--capabilities"...). Plus you can rely on "install" to always be
> there, which I don't think is true for "setcap".

Thanks for the patch.
However, since that's the only benefit I see (setcap may not be installed),
I'm 60:40 against.  If you find some other install program with this
feature, that would strengthen the case for adding the option here.

Reply via email to