Nginx-ru mailing list archive (nginx-ru@sysoev.ru)
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [PATCH 2/2] Setting more capabilities(CAP_CHOWN, CAP_DAC_OVERRIDE, CAP_DAC_READ_SEARCH and CAP_SETUID).
20.03.2009 07:50, Igor Sysoev wrote:
И вообще, эти capabilities где-нибудь документированы ? Я с ходу не нашёл,
что означают CAP_EFFECTIVE, CAP_PERMITTED и CAP_INHERITABLE.
Нашёл на http://www.ibm.com/developerworks/ru/library/l-posixcap/l-posixcap.html
Каждый процесс имеет три набора прав доступа: доступные (permitted) (P),
наследуемые (inheritable) (I) и текущие (effective) (E)
Похоже, это оно.
- References:
- [PATCH] Start use capabilities on linux
- From: Kirill A. Korinskiy
- [PATCH 2/2] Setting more capabilities(CAP_CHOWN, CAP_DAC_OVERRIDE, CAP_DAC_READ_SEARCH and CAP_SETUID).
- From: Kirill A. Korinskiy
- Re: [PATCH 2/2] Setting more capabilities(CAP_CHOWN, CAP_DAC_OVERRIDE, CAP_DAC_READ_SEARCH and CAP_SETUID).
- Re: [PATCH 2/2] Setting more capabilities(CAP_CHOWN, CAP_DAC_OVERRIDE, CAP_DAC_READ_SEARCH and CAP_SETUID).
- From: Kirill A . Korinskiy
- Re: [PATCH 2/2] Setting more capabilities(CAP_CHOWN, CAP_DAC_OVERRIDE, CAP_DAC_READ_SEARCH and CAP_SETUID).
- Re: [PATCH 2/2] Setting more capabilities(CAP_CHOWN, CAP_DAC_OVERRIDE, CAP_DAC_READ_SEARCH and CAP_SETUID).
- From: Kirill A . Korinskiy
- Re: [PATCH 2/2] Setting more capabilities(CAP_CHOWN, CAP_DAC_OVERRIDE, CAP_DAC_READ_SEARCH and CAP_SETUID).
|