From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1753426AbbBYUZY (ORCPT ); Wed, 25 Feb 2015 15:25:24 -0500 Received: from resqmta-po-02v.sys.comcast.net ([96.114.154.161]:57588 "EHLO resqmta-po-02v.sys.comcast.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1752828AbbBYUZW (ORCPT ); Wed, 25 Feb 2015 15:25:22 -0500 Date: Wed, 25 Feb 2015 14:25:19 -0600 (CST) From: Christoph Lameter X-X-Sender: cl@gentwo.org To: Serge Hallyn cc: "Serge E. Hallyn" , Serge Hallyn , Andy Lutomirski , Aaron Jones , "Ted Ts'o" , linux-security-module@vger.kernel.org, akpm@linuxfoundation.org, "Andrew G. Morgan" , Mimi Zohar , Austin S Hemmelgarn , Markku Savela , Jarkko Sakkinen , linux-kernel@vger.kernel.org, linux-api@vger.kernel.org, Michael Kerrisk , Jonathan Corbet Subject: Re: [PATCH] capabilities: Ambient capability set V1 In-Reply-To: <20150225033247.GC29685@ubuntumail> Message-ID: References: <20150223161625.GD25477@ubuntumail> <20150223164623.GB32181@mail.hallyn.com> <20150223181553.GE25477@ubuntumail> <20150224051928.GA14755@mail.hallyn.com> <20150224154715.GA20682@mail.hallyn.com> <20150224164429.GB29685@ubuntumail> <20150225033247.GC29685@ubuntumail> Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Wed, 25 Feb 2015, Serge Hallyn wrote: > Yeah we could make this Well doing that breaks su. Its best to leave perm bits untouched. christoph@fujitsu-haswell:~$ su setgid: Operation not permitted From mboxrd@z Thu Jan 1 00:00:00 1970 From: Christoph Lameter Subject: Re: [PATCH] capabilities: Ambient capability set V1 Date: Wed, 25 Feb 2015 14:25:19 -0600 (CST) Message-ID: References: <20150223161625.GD25477@ubuntumail> <20150223164623.GB32181@mail.hallyn.com> <20150223181553.GE25477@ubuntumail> <20150224051928.GA14755@mail.hallyn.com> <20150224154715.GA20682@mail.hallyn.com> <20150224164429.GB29685@ubuntumail> <20150225033247.GC29685@ubuntumail> Content-Type: TEXT/PLAIN; charset=US-ASCII Return-path: In-Reply-To: <20150225033247.GC29685@ubuntumail> Sender: linux-api-owner-u79uwXL29TY76Z2rM5mHXA@public.gmane.org To: Serge Hallyn Cc: "Serge E. Hallyn" , Serge Hallyn , Andy Lutomirski , Aaron Jones , Ted Ts'o , linux-security-module-u79uwXL29TY76Z2rM5mHXA@public.gmane.org, akpm-hQyY1W1yCW8ekmWlsbkhG0B+6BGkLq7r@public.gmane.org, "Andrew G. Morgan" , Mimi Zohar , Austin S Hemmelgarn , Markku Savela , Jarkko Sakkinen , linux-kernel-u79uwXL29TY76Z2rM5mHXA@public.gmane.org, linux-api-u79uwXL29TY76Z2rM5mHXA@public.gmane.org, Michael Kerrisk , Jonathan Corbet List-Id: linux-api@vger.kernel.org On Wed, 25 Feb 2015, Serge Hallyn wrote: > Yeah we could make this Well doing that breaks su. Its best to leave perm bits untouched. christoph@fujitsu-haswell:~$ su setgid: Operation not permitted