linux-kernel.vger.kernel.org archive mirror
 help / color / mirror / Atom feed
* capabilities-introduce-per-process-capability-bounding-set.patch breaks FC6 Avahi
@ 2007-11-30 19:41 Jeff Dike
  2007-11-30 22:29 ` Jiri Slaby
  0 siblings, 1 reply; 3+ messages in thread
From: Jeff Dike @ 2007-11-30 19:41 UTC (permalink / raw)
  To: Andrew Morton, Serge E. Hallyn; +Cc: LKML

avahi-daemon fails to start on FC6 when
capabilities-introduce-per-process-capability-bounding-set.patch is
applied.

strace shows
	capset(0x19980330, 0, {CAP_SETGID|CAP_SETUID|CAP_SYS_CHROOT, CAP_SETGID|CAP_SETUID|CAP_SYS_CHROOT, 0}) = -1 EPERM (Operation not permitted)

I don't know if this is expected, but the changelog doesn't seem to
imply that this will break things.

				Jeff

-- 
Work email - jdike at linux dot intel dot com

^ permalink raw reply	[flat|nested] 3+ messages in thread

* Re: capabilities-introduce-per-process-capability-bounding-set.patch breaks FC6 Avahi
  2007-11-30 19:41 capabilities-introduce-per-process-capability-bounding-set.patch breaks FC6 Avahi Jeff Dike
@ 2007-11-30 22:29 ` Jiri Slaby
  2007-12-01  0:21   ` Jeff Dike
  0 siblings, 1 reply; 3+ messages in thread
From: Jiri Slaby @ 2007-11-30 22:29 UTC (permalink / raw)
  To: Jeff Dike; +Cc: Andrew Morton, Serge E. Hallyn, LKML

On 11/30/2007 08:41 PM, Jeff Dike wrote:
> avahi-daemon fails to start on FC6 when
> capabilities-introduce-per-process-capability-bounding-set.patch is
> applied.
> 
> strace shows
> 	capset(0x19980330, 0, {CAP_SETGID|CAP_SETUID|CAP_SYS_CHROOT, CAP_SETGID|CAP_SETUID|CAP_SYS_CHROOT, 0}) = -1 EPERM (Operation not permitted)
> 
> I don't know if this is expected, but the changelog doesn't seem to
> imply that this will break things.

Nope, try this :):
http://lkml.org/lkml/2007/11/28/390

regards,
-- 
Jiri Slaby (jirislaby@gmail.com)
Faculty of Informatics, Masaryk University

^ permalink raw reply	[flat|nested] 3+ messages in thread

* Re: capabilities-introduce-per-process-capability-bounding-set.patch breaks FC6 Avahi
  2007-11-30 22:29 ` Jiri Slaby
@ 2007-12-01  0:21   ` Jeff Dike
  0 siblings, 0 replies; 3+ messages in thread
From: Jeff Dike @ 2007-12-01  0:21 UTC (permalink / raw)
  To: Jiri Slaby; +Cc: Andrew Morton, Serge E. Hallyn, LKML

On Fri, Nov 30, 2007 at 11:29:47PM +0100, Jiri Slaby wrote:
> Nope, try this :):
> http://lkml.org/lkml/2007/11/28/390

Excellent, thanks.

I just wanted to make sure that someone knew about this.

			Jeff

-- 
Work email - jdike at linux dot intel dot com

^ permalink raw reply	[flat|nested] 3+ messages in thread

end of thread, other threads:[~2007-12-01  0:21 UTC | newest]

Thread overview: 3+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2007-11-30 19:41 capabilities-introduce-per-process-capability-bounding-set.patch breaks FC6 Avahi Jeff Dike
2007-11-30 22:29 ` Jiri Slaby
2007-12-01  0:21   ` Jeff Dike

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).