Skip to contentSkip to conversation

policycoreutils: newrole: FIXME do not drop

PATCH New Daniel J Walsh 1 participant 1 message Jun 1, 2012 SELinux security module

lore
Share & tools
lore
#0 lore raw

PATCH 8/90 policycoreutils: newrole: FIXME do not drop

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

This patch looks good to me. acked.

If you run newrole as root and it drops capabilities, the next shell script does not have any capabilities and can not function.

newrole -L TopSecret

Would end up with a root shell and no capabilities. -----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk/JEIgACgkQrlYvE4MpobPH9ACfUrUOvNr3QavxkJrGHxPlf6fC wh0An2y3xa3Ns71EtaaiiU9BUC0X9bEY
=Davq
-----END PGP SIGNATURE-----