On Thu, 2013-08-29 at 11:46 -0700, H. Peter Anvin wrote: > On 08/29/2013 11:35 AM, Matthew Garrett wrote: > > On Thu, 2013-08-29 at 11:22 -0700, H. Peter Anvin wrote: > >> On 08/19/2013 09:10 AM, Matthew Garrett wrote: > >>> + if (!capable(CAP_COMPROMISE_KERNEL)) > >>> + return -EPERM; > >>> + > >> > >> Stale bits? > > > > Yeah. Did I manage to send out the old copy of that again? I'm sorry, > > spending a few months concentrating on cloud stuff seems to have > > entirely destroyed my ability to deal with git :( > > > > No, you mixed and matched in a single patch...
Right, but I'd fixed that in V2 (which I see I *did* send correctly, and you're just replying to the old one :)) > I still believe that CAP_RAWIO should be forbidden in this case. Seems fair. -- Matthew Garrett <matthew.garr...@nebula.com>
