[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: CAP_FOWNER



On Sun, Oct 12, 2003 at 12:32:46PM +0200, Bastian Blank wrote:
> may package scripts assume, that they have the fowner capability
> available? many postinst scripts first set the owner of a file/dir and
> try to change the permissions after. this is only allowed with this
> capability set.

If you're setting the setuid or setgid bit then you have to do it this
way round: changing the owner may clear that bit, depending on the
kernel version according to chown(2).

I think sanity dictates that we assume this capability.

-- 
Colin Watson                                  [cjwatson@flatline.org.uk]



Reply to: