linux-kernel - Re: File capabilities are not 'working' and I have no idea why

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:	Sun, 26 Jan 2014 16:28:59 +0000
From:	Aaron Jones <aaronmdjones@...il.com>
To:	"Serge E. Hallyn" <serge@...lyn.com>
CC:	linux-kernel@...r.kernel.org
Subject: Re: File capabilities are not 'working' and I have no idea why

On 26/01/14 16:22, Serge E. Hallyn wrote:
> Hm, I'm running Ubuntu 3.13.0-5-generic and I do get
>
> serge@tp:~/test$ ./caps
> Effective capabilities:
> net_bind_service
> Permitted capabilities:
> net_bind_service
>
> Any chance (grasping for straws here) that the hardening patches
> are interfering?  Can you try hand-building an upstream kernel to
> test with?

I downloaded a vanilla 3.12.8 tree directly from kernel.org
for the purposes of my previous post. I was running that kernel
then... I also have the same problem with the hardened kernel now.

I'm at a loss as to why it doesn't work on 3.12.8, but it does on
3.10.7, hardening patches or not.

--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/