From mboxrd@z Thu Jan 1 00:00:00 1970 X-Msuck: nntp://news.gmane.org/gmane.linux.lib.musl.general/1774 Path: news.gmane.org!not-for-mail From: Igmar Palsenberg Newsgroups: gmane.linux.lib.musl.general Subject: Re: Implementation of sys/capabilities.h Date: Mon, 27 Aug 2012 12:23:32 +0200 Message-ID: References: <71934712-6162-4358-A8DA-FAE169BE5D41@palsenberg.com> Reply-To: musl@lists.openwall.com NNTP-Posting-Host: plane.gmane.org Mime-Version: 1.0 (Mac OS X Mail 6.0 \(1486\)) Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable X-Trace: ger.gmane.org 1346063032 29046 80.91.229.3 (27 Aug 2012 10:23:52 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Mon, 27 Aug 2012 10:23:52 +0000 (UTC) To: musl@lists.openwall.com Original-X-From: musl-return-1775-gllmg-musl=m.gmane.org@lists.openwall.com Mon Aug 27 12:23:54 2012 Return-path: Envelope-to: gllmg-musl@plane.gmane.org Original-Received: from mother.openwall.net ([195.42.179.200]) by plane.gmane.org with smtp (Exim 4.69) (envelope-from ) id 1T5wU2-0005j8-Um for gllmg-musl@plane.gmane.org; Mon, 27 Aug 2012 12:23:51 +0200 Original-Received: (qmail 11885 invoked by uid 550); 27 Aug 2012 10:23:48 -0000 Mailing-List: contact musl-help@lists.openwall.com; run by ezmlm Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: Original-Received: (qmail 11873 invoked from network); 27 Aug 2012 10:23:48 -0000 In-Reply-To: X-Mailer: Apple Mail (2.1486) Xref: news.gmane.org gmane.linux.lib.musl.general:1774 Archived-At: >> I'm in the works of implementing capability support within musl. This = we need to implement if you ask me : >>=20 >> cap_init() >> cap_free() >> cap_dup() >> cap_get_flag() >> cap_set_flag() >> cap_clear() >> cap_get_proc() >> cap_set_proc() >=20 > Why in Musl out of interest? They are not in other libc's, and people > expect to link to libcap for them surely. And some people argue that > the interfaces are not very well designed (indeed libcap seems to be > adding extra ones not in the withdrawn posix draft), eg see > http://people.redhat.com/sgrubb/libcap-ng/ It's open for debate. The syscalls need to be there (including the = structs the kernel uses), and I've got those in a patch. I agree the interface is shit : Way to complicated, while only need some = simple functions, with a bitmap to represent them. Why implement it ? It's the only thing we got, and programs assume it's POSIX, so it should = be present. Yes, it's broken, but capabilities are a needed feature if = you ask me. Igmar=