* Gregory (Grisha) Trubetskoy ([EMAIL PROTECTED]) wrote: > > Has there been any discussion of having a feature whereby a binary would > be executed with higher capabilities automatically?
This can be done with two ways. Normail setuid-root will elevate, and then some LSM modules like SELinux and LIDS can define which capabilities a program will get when it's exectued. thanks, -chris -- Linux Security Modules http://lsm.immunix.org http://lsm.bkbits.net _______________________________________________ Vserver mailing list [EMAIL PROTECTED] http://list.linux-vserver.org/mailman/listinfo/vserver
