• Serge E. Hallyn's avatar
    Implement file posix capabilities · b5376771
    Serge E. Hallyn authored
    Implement file posix capabilities.  This allows programs to be given a
    subset of root's powers regardless of who runs them, without having to use
    setuid and giving the binary all of root's powers.
    
    This version works with Kaigai Kohei's userspace tools, found at
    http://www.kaigai.gr.jp/index.php.  For more information on how to use this
    patch, Chris Friedhoff has posted a nice page at
    http://www.friedhoff.org/fscaps.html.
    
    Changelog:
    	Nov 27:
    	Incorporate fixes from Andrew Morton
    	(security-introduce-file-caps-tweaks and
    	security-introduce-file-caps-warning-fix)
    	Fix Kconfig dependency.
    	Fix change signaling behavior when file caps are not compiled in.
    
    	Nov 13:
    	Integrate comments from Alexey: Remove CONFIG_ ifdef from
    	capability.h, and use %zd for printing a size_t.
    
    	Nov 13:
    	Fix endianness warnings by sparse as suggested by Alexey
    	Dobriyan.
    
    	Nov 09:
    	Address warnings of unused variables at cap_bprm_set_security
    	when file capabilities are disabled, and simultaneou...
    b5376771
Kconfig 3.51 KB