Re: [PATCH] Drop unneeded capabilities

[Jefferson Ogata <Jefferson.Ogata () noaa gov>]

Michael Richardson wrote:
> > > > > > "Pekka" == Pekka Savola <pekkas () netcore fi> writes:
>
>     Pekka> Have you checked the code in the CVS?  It already includes a
>     Pekka> "droproot" option.
>
>     Pekka> Yours is slightly different, though, as it uses
>     Pekka> (Linux-specific?) capabilities.  I'm not sure if it's
>     Pekka> necessary when we already drop the root privileges.
>
>   Yes, they are Linux specific.
>   We should have a file:
>        droppriv-FOO.c

IRIX, for one, also supports capabilities.

--
Jefferson Ogata <Jefferson.Ogata () noaa gov>
NOAA Computer Incident Response Team (N-CIRT) <ncirt () noaa gov>

-
This is the tcpdump-workers list.
Visit https://lists.sandelman.ca/ to unsubscribe.