Andrew G. Morgan 6906b57c72 Fix the Inheritable capability defaults. ...

The Linux kernel never sets the Inheritable capability flag to
anything other than empty. Non-empty values are always exclusively
set by userspace code.

[The kernel stopped defaulting this set of capability values to the
 full set in 2000 after a privilege escalation with Capabilities
 affecting Sendmail and others.]

Signed-off-by: Andrew G. Morgan <morgan@kernel.org>

2022-02-01 13:55:46 -08:00

8.6 KiB

Raw Blame History

View Raw