Ambient capabilities for setpriv
Status from this message: Applied. (You've forgot to add --ambient-caps to usage(), fixed by
Get series with b4
b4 am [email protected]Versions newest first
Patches in v1 Applied
| # | Subject and files | Size | Replies | Applied |
|---|---|---|---|---|
| 1/5 | setpriv: introduce indirection for `capng_type` enumsys-utils/ | +19 | 1 reply | |
| 2/5 | setpriv: proxy function checking whether a capability is setsys-utils/ | +20 | 1 reply | |
| 3/5 | setpriv: proxy function to update capabilitiessys-utils/ | +17 | 1 reply | |
| 4/5 | setpriv: support dumping ambient capabilitiessys-utils/ | +18 | 1 reply | |
| 5/5 | setpriv: support modifying the set of ambient capabilitiessys-utils/ sys-utils/ | +33 | 2 replies |
Reviews trailers per patch
3 of 5 patches have a Reviewed-by or Acked-by.
| Patch | Andy Lutomirski |
|---|---|
| 1/5 | |
| 2/5 | R-b |
| 3/5 | R-b |
| 4/5 | R-b |
| 5/5 |
Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes.
Cover letter [PATCH 0/5] Ambient capabilities for setpriv
Hi,
this patch series implements support for ambient capabilities in setpriv(1). Ambient capabilities have been implemented with Linux 4.3 by Andy Lutomirski [1]. Quoting from capabilities(7):
This is a set of capabilities that are preserved across an execve(2) of a program that is not privileged.
The patches are inspired and squarely based on published patches for util-linux by Andy [2]. As these commits seem to never have been upstreamed, I've contacted Andy a few days ago whether he intends to do so in the near future, but got no response. Anyway, as I would like to have ambient capabilities available in setpriv, I took up the baton and wrote this patch series.
Regards
Patrick
[1]: https://lwn.net/Articles/636533/
[2]: https://git.kernel.org/pub/scm/linux/kernel/git/luto/util-linux-playground.git/commit/?h=cap_ambient&id=860c73ac1acaaae976bdd3bb83b89b0180f0702a
Patrick Steinhardt (5):
setpriv: introduce indirection for capng_type enum
setpriv: proxy function checking whether a capability is set
setpriv: proxy function to update capabilities
setpriv: support dumping ambient capabilities
setpriv: support modifying the set of ambient capabilities
sys-utils/setpriv.1 | 8 ++-- sys-utils/setpriv.c | 109 ++++++++++++++++++++++++++++++++++++++++++++++------ 2 files changed, 103 insertions(+), 14 deletions(-)
Signature · 1 line
2.13.1