Re: [PATCH] capabilities: introduce per-process capability bounding set (v10)

2007-12-03 Thread Serge E. Hallyn
Quoting Andrew Morgan ([EMAIL PROTECTED]): -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 [I've droped lkml] KaiGai Kohei wrote: But !cap_xxx is a bit misunderstandable for me. Someone may misunderstand this line means any capabilities except for cap_xxx. I like '!', but you're going

Re: [PATCH 2/2] hijack: update task_alloc_security

2007-12-03 Thread Crispin Cowan
Serge E. Hallyn wrote: Quoting Crispin Cowan ([EMAIL PROTECTED]): I think that CAP_NS_OVERRIDE|CAP_SYS_PTRACE is a problem because of the Oops, yeah I meant . Cool. With then I have no problem at all. Thanks, Crispin -- Crispin Cowan, Ph.D.

Re: [PATCH] (2.6.24-rc3-mm2) -mm Smack mutex cleanup

2007-12-03 Thread Jiri Slaby
On 12/03/2007 07:39 PM, Casey Schaufler wrote: From: Casey Schaufler [EMAIL PROTECTED] Clean out unnecessary mutex initializations for Smack list locks. Once this is done, there is no need for them to be shared among multiple files, so pull them out of the header file and put them in the