Re: [PATCH 2/2] file capabilities: accomodate >32 bit capabilities

2007-05-14 Thread Serge E. Hallyn
Quoting Suparna Bhattacharya ([EMAIL PROTECTED]): > On Thu, May 10, 2007 at 01:01:27PM -0700, Andreas Dilger wrote: > > On May 08, 2007 16:49 -0500, Serge E. Hallyn wrote: > > > Quoting Andreas Dilger ([EMAIL PROTECTED]): > > > > One of the important use cases I can see today is the ability to >

Re: [PATCH 2/2] file capabilities: accomodate 32 bit capabilities

2007-05-14 Thread Serge E. Hallyn
Quoting Suparna Bhattacharya ([EMAIL PROTECTED]): On Thu, May 10, 2007 at 01:01:27PM -0700, Andreas Dilger wrote: On May 08, 2007 16:49 -0500, Serge E. Hallyn wrote: Quoting Andreas Dilger ([EMAIL PROTECTED]): One of the important use cases I can see today is the ability to split

Re: [PATCH 2/2] file capabilities: accomodate >32 bit capabilities

2007-05-11 Thread Suparna Bhattacharya
On Thu, May 10, 2007 at 01:01:27PM -0700, Andreas Dilger wrote: > On May 08, 2007 16:49 -0500, Serge E. Hallyn wrote: > > Quoting Andreas Dilger ([EMAIL PROTECTED]): > > > One of the important use cases I can see today is the ability to > > > split the heavily-overloaded e.g. CAP_SYS_ADMIN into

Re: [PATCH 2/2] file capabilities: accomodate 32 bit capabilities

2007-05-11 Thread Suparna Bhattacharya
On Thu, May 10, 2007 at 01:01:27PM -0700, Andreas Dilger wrote: On May 08, 2007 16:49 -0500, Serge E. Hallyn wrote: Quoting Andreas Dilger ([EMAIL PROTECTED]): One of the important use cases I can see today is the ability to split the heavily-overloaded e.g. CAP_SYS_ADMIN into much more

Re: [PATCH 2/2] file capabilities: accomodate >32 bit capabilities

2007-05-10 Thread Andreas Dilger
On May 08, 2007 16:49 -0500, Serge E. Hallyn wrote: > Quoting Andreas Dilger ([EMAIL PROTECTED]): > > One of the important use cases I can see today is the ability to > > split the heavily-overloaded e.g. CAP_SYS_ADMIN into much more fine > > grained attributes. > > Sounds plausible, though it

Re: [PATCH 2/2] file capabilities: accomodate 32 bit capabilities

2007-05-10 Thread Andreas Dilger
On May 08, 2007 16:49 -0500, Serge E. Hallyn wrote: Quoting Andreas Dilger ([EMAIL PROTECTED]): One of the important use cases I can see today is the ability to split the heavily-overloaded e.g. CAP_SYS_ADMIN into much more fine grained attributes. Sounds plausible, though it suffers

Re: [PATCH 2/2] file capabilities: accomodate >32 bit capabilities

2007-05-08 Thread Serge E. Hallyn
Quoting Andreas Dilger ([EMAIL PROTECTED]): > On May 08, 2007 14:17 -0500, Serge E. Hallyn wrote: > > As the capability set changes and distributions start tagging > > binaries with capabilities, we would like for running an older > > kernel to not necessarily make those binaries unusable. > > >

Re: [PATCH 2/2] file capabilities: accomodate >32 bit capabilities

2007-05-08 Thread Andreas Dilger
On May 08, 2007 14:17 -0500, Serge E. Hallyn wrote: > As the capability set changes and distributions start tagging > binaries with capabilities, we would like for running an older > kernel to not necessarily make those binaries unusable. > > (0. Enable the CONFIG_SECURITY_FS_CAPABILITIES

[PATCH 2/2] file capabilities: accomodate >32 bit capabilities

2007-05-08 Thread Serge E. Hallyn
From: Serge E. Hallyn <[EMAIL PROTECTED]> Subject: [PATCH 2/2] file capabilities: accomodate >32 bit capabilities (Changelog: fixed syntax error in dummy version of check_cap_sanity()) As the capability set changes and distributions start tagging binaries with capabilities, we w

[PATCH 2/2] file capabilities: accomodate 32 bit capabilities

2007-05-08 Thread Serge E. Hallyn
From: Serge E. Hallyn [EMAIL PROTECTED] Subject: [PATCH 2/2] file capabilities: accomodate 32 bit capabilities (Changelog: fixed syntax error in dummy version of check_cap_sanity()) As the capability set changes and distributions start tagging binaries with capabilities, we would like

Re: [PATCH 2/2] file capabilities: accomodate 32 bit capabilities

2007-05-08 Thread Andreas Dilger
On May 08, 2007 14:17 -0500, Serge E. Hallyn wrote: As the capability set changes and distributions start tagging binaries with capabilities, we would like for running an older kernel to not necessarily make those binaries unusable. (0. Enable the CONFIG_SECURITY_FS_CAPABILITIES

Re: [PATCH 2/2] file capabilities: accomodate 32 bit capabilities

2007-05-08 Thread Serge E. Hallyn
Quoting Andreas Dilger ([EMAIL PROTECTED]): On May 08, 2007 14:17 -0500, Serge E. Hallyn wrote: As the capability set changes and distributions start tagging binaries with capabilities, we would like for running an older kernel to not necessarily make those binaries unusable. (0.