Re: [gentoo-dev] [SECURITY] Minimizing the suid usage

[Ciaran McCreesh]

On Sun, 23 Mar 2008 20:45:24 +0200
"Alon Bar-Lev" <alonbl@g.o> wrote:
> On 3/23/08, Ciaran McCreesh <ciaran.mccreesh@××××××××××.com> wrote:
> >  > Why? A simple USE flag should be enough, if set use caps, if not
> >  > use current.
> >
> >
> > A user turns the use flag on, the ebuild creates files using caps
> >  rather than set*id, the package manager merges it by copying the
> > file and the installed file ends up with no caps and no set*id bit.
>
> File system attributes already supported for selinux. I also checked
> this with capabilities and it works with portage.

But they aren't upscaled.

-- 
Ciaran McCreesh