On Sat, Mar 07, 2015 at 09:06:46AM -0600, Christoph Lameter wrote: > On Fri, 6 Mar 2015, Andy Lutomirski wrote: > > > > christoph@fujitsu-haswell:~$ getcap ambient_test > > > > > > ambient_test = cap_setpcap,cap_net_admin,cap_net_raw,cap_sys_nice+eip > > > > I think that's right. fI doesn't set pI. > > Ok then that is the point of pI if it cannot be set? It can be set! Anything with CAP_SETPCAP can fill it's pI. When it and its children exec(), pI' = pI. -- To unsubscribe from this list: send the line "unsubscribe linux-api" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
