[arch-general] file system capabilities

2009-11-04 Thread Shridhar Daithankar
Hi, I was reading thr. /. commentary on the latest linux kernel bug, got drifted into file system capabilities. and got this, (from http://lwn.net/Articles/313838/) [r...@presario shridhar]# ls -la /bin/ping -rwsr-xr-x 1 root root 33360 2008-10-04 17:48 /bin/ping [r...@presario shridhar]#

Re: [arch-general] file system capabilities

2009-11-04 Thread Daenyth Blank
On Wed, Nov 4, 2009 at 10:12, Shridhar Daithankar ghodech...@ghodechhap.net wrote: so can this be done by default? thus reducing setuid usage? it should improve security right? This should probably go on the bug tracker as a feature request.

Re: [arch-general] file system capabilities

2009-11-04 Thread Jan de Groot
On Wed, 2009-11-04 at 20:42 +0530, Shridhar Daithankar wrote: Hi, I was reading thr. /. commentary on the latest linux kernel bug, got drifted into file system capabilities. and got this, (from http://lwn.net/Articles/313838/) [r...@presario shridhar]# ls -la /bin/ping -rwsr-xr-x 1

Re: [arch-general] file system capabilities

2009-11-04 Thread Gerardo Exequiel Pozzi
Daenyth Blank wrote: On Wed, Nov 4, 2009 at 10:14, Daenyth Blank daenyth+a...@gmail.com wrote: On Wed, Nov 4, 2009 at 10:12, Shridhar Daithankar ghodech...@ghodechhap.net wrote: so can this be done by default? thus reducing setuid usage? it should improve security right?

Re: [arch-general] file system capabilities

2009-11-04 Thread Magnus Therning
On Wed, Nov 4, 2009 at 3:15 PM, Jan de Groot j...@jgc.homeip.net wrote: On Wed, 2009-11-04 at 20:42 +0530, Shridhar Daithankar wrote: Hi, I was reading thr. /. commentary on the latest linux kernel bug, got drifted into file system capabilities. and got this, (from

Re: [arch-general] file system capabilities

2009-11-04 Thread Thomas Bächler
Jan de Groot schrieb: This can be done by default, but capabilities aren't preserved when making tarballs. Every capability has to be set from post_install/post_upgrade in such cases. Maybe this is something worth to implement though. Actually, bsdtar preserves them when packing, but upon