more libcap2

Robert Connolly robert at linuxfromscratch.org
Fri Oct 3 15:45:43 PDT 2008


For passwd:

chmod -s /bin/passwd
setcap CAP_DAC_OVERRIDE,CAP_SETUID=ep /bin/passwd

linux/capability.h doesn't specifically say it, but CAP_DAC_OVERRIDE bypasses 
rwx checking on all files.

robert
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 197 bytes
Desc: not available
URL: <http://lists.linuxfromscratch.org/pipermail/hlfs-dev/attachments/20081003/43550d31/attachment.sig>


More information about the hlfs-dev mailing list