Re: Filesystem Capabilities in 2.6?

[Olaf Dietsche]

Antti Salmela <[e-mail]> writes:

> Dax Kelson <[e-mail]> wrote:
>
>> Each app should run in its own security context by itself.  That is why
>> I have all the following users in my /etc/passwd:
>> 
>> apache nscd squid xfs ident rpc pcap nfsnobody radvd gdm named ntp
>
> Well, wouldn't it be then logical to associate uids to capabilities, e.g. I
> could have ping binary setuid to user ping which would have just the
> necessary capabilities to operate?

Welcome to accessfs :-)

<http://groups.google.com/groups?selm=87k7km9fti.fsf%40goat.bogus.local>
<http://groups.google.com/groups?selm=87elau9ft2.fsf%40goat.bogus.local>
<http://groups.google.com/groups?selm=878z129fnz.fsf%40goat.bogus.local>

It's not exactly what you asked for, but I think it's the closest you
can get at the moment.

Regards, Olaf.