On Tue, Feb 28, 2023 at 11:39 AM Linus Torvalds
<torvalds@xxxxxxxxxxxxxxxxxxxx> wrote:
>
> This actually looks sane enough that I might even boot it. Call me crazy.
LOL.
I had to go through the patch with a find comb, because everything
worked except for some reason network name resolution failed:
systemd-resolved got a permission error on
Failed to listen on UDP socket 127.0.0.53:53: Permission denied
Spot the insufficient fixup in my cut-and-paste capget() patch:
kdata[0].effective = pE.val;
kdata[1].effective = pE.val >> 32;
kdata[0].permitted = pP.val;
kdata[1].permitted = pP.val >> 32;
kdata[0].inheritable = pI.val;
kdata[0].inheritable = pI.val >> 32;
Oops.
But with that fixed, that patch actually does seem to work.
Linus
