Re: [arch-general] file system capabilities

2009-11-04 Thread Thomas Bächler
Jan de Groot schrieb: This can be done by default, but capabilities aren't preserved when making tarballs. Every capability has to be set from post_install/post_upgrade in such cases. Maybe this is something worth to implement though. Actually, bsdtar preserves them when packing, but upon extra

Re: [arch-general] file system capabilities

2009-11-04 Thread Magnus Therning
On Wed, Nov 4, 2009 at 3:15 PM, Jan de Groot wrote: > On Wed, 2009-11-04 at 20:42 +0530, Shridhar Daithankar wrote: >> Hi, >> >> I was reading thr. /. commentary on the latest linux kernel bug, got drifted >> into file system capabilities. and got this, (from >> http://lwn.net/Articles/313838/) >>

Re: [arch-general] file system capabilities

2009-11-04 Thread Gerardo Exequiel Pozzi
Daenyth Blank wrote: > On Wed, Nov 4, 2009 at 10:14, Daenyth Blank wrote: > >> On Wed, Nov 4, 2009 at 10:12, Shridhar Daithankar >> wrote: >> >>> so can this be done by default? thus reducing setuid usage? it should >>> improve >>> security right? >>> >>> >> This should probably g

Re: [arch-general] file system capabilities

2009-11-04 Thread Daenyth Blank
On Wed, Nov 4, 2009 at 10:14, Daenyth Blank wrote: > On Wed, Nov 4, 2009 at 10:12, Shridhar Daithankar > wrote: >> so can this be done by default? thus reducing setuid usage? it should improve >> security right? >> > This should probably go on the bug tracker as a feature request. > Actually, th

Re: [arch-general] file system capabilities

2009-11-04 Thread Jan de Groot
On Wed, 2009-11-04 at 20:42 +0530, Shridhar Daithankar wrote: > Hi, > > I was reading thr. /. commentary on the latest linux kernel bug, got drifted > into file system capabilities. and got this, (from > http://lwn.net/Articles/313838/) > > [r...@presario shridhar]# ls -la /bin/ping > -rwsr-xr-

Re: [arch-general] file system capabilities

2009-11-04 Thread Daenyth Blank
On Wed, Nov 4, 2009 at 10:12, Shridhar Daithankar wrote: > so can this be done by default? thus reducing setuid usage? it should improve > security right? > This should probably go on the bug tracker as a feature request.

[arch-general] file system capabilities

2009-11-04 Thread Shridhar Daithankar
Hi, I was reading thr. /. commentary on the latest linux kernel bug, got drifted into file system capabilities. and got this, (from http://lwn.net/Articles/313838/) [r...@presario shridhar]# ls -la /bin/ping -rwsr-xr-x 1 root root 33360 2008-10-04 17:48 /bin/ping [r...@presario shridhar]# chmod