* Alessandro Selli: > Florian Weimer wrote: >> * Alessandro Selli: >> >>> CAP_DAC_OVERRIDE is root-equivalent only as far as the DAC is >>> concerned. >> This is incorrect. > > Is capabilities(7) man page incorrect?
> What else does this capability allow a process to do? As I tried to explain, escalation to full root is possible on most real-world systems, so this capability is not very restrictive in practice. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
