On Wed, 2004-12-08 at 15:21, Chris Wright wrote: > I agree, there's no point in carrying duplicate logic. Why don't you > add a flag for cap_sys_admin set, and change current logic to accpet > that flag. Something like this (not compiled, not tested, would need at > least a header addition). Actually, we have the same problem with the dummy module, so we may want the helper to share between dummy and capability even if we don't need it for SELinux. -- Stephen Smalley <sds@private> National Security Agency
This archive was generated by hypermail 2.1.3 : Wed Dec 08 2004 - 13:43:33 PST