On Tue, 09 Aug 2005 07:26:21 +0200, David Madore said: > * Second, a much more extensive change, the patch introduces a third > set of capabilities for every process, the "bounding" set. Normally > the bounding set has every capability in it
How is this different in semantics from the existing 'permitted' capset?
include/linux/capabilities.h:
typedef struct __user_cap_data_struct {
__u32 effective;
__u32 permitted;
__u32 inheritable;
} __user *cap_user_data_t;
pgpIgPN4MdLwj.pgp
Description: PGP signature
