On Tue, Oct 28, 2003 at 06:45:08PM +0100, Andreas Metzler wrote: > Perhaps execcap(8) can be used as base for the "general facility"? That sounds useful. For our purposes, though, it would need a setuid wrapper in order to do the other work, and that program could probably just as easily set the capabilities also. -- - mdz