Re: [PATCH] Completely honor prctl(PR_SET_KEEPCAPS, 1)

[Alan Cox]

> prtctl(PR_SET_KEEPCAPS, 1)
> setuid(uid)
> setgid(gid)
> 
> The end result is exactly the same.  I'm trying to envision how this patch
> would change security in a negative way.  I keep coming back to the Unix
> idea of "don't be smarter than the admin; don't try to protect root from
> himself". 
> 
> Maybe we could enchance PR_SET_KEEPCAPS so that:
> 
> prtctl(PR_SET_KEEPCAPS, 2) kept both the permitted and the effective caps.

If thats the concern (and its a fair one) then just fix 2.5 not 2.4. 2.4
stuff will need to do the usermode fixes anyway due to old releases