From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) by finch.gentoo.org (Postfix) with ESMTP id 74AA9138693 for ; Sat, 26 Jan 2013 00:12:02 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id EE27CE05A4; Sat, 26 Jan 2013 00:11:59 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [140.211.166.183]) (using TLSv1 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 14998E0534 for ; Sat, 26 Jan 2013 00:11:59 +0000 (UTC) Received: from [192.168.0.53] (nsg93-9-78-225-4-220.fbx.proxad.net [78.225.4.220]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: eva) by smtp.gentoo.org (Postfix) with ESMTPSA id BB8B233DD27 for ; Sat, 26 Jan 2013 00:11:57 +0000 (UTC) Message-ID: <1359159053.32487.4.camel@kanae> Subject: Re: [gentoo-dev] fcaps.eclass: bringing filesystem capabilities to the tree From: Gilles Dartiguelongue To: gentoo-dev@lists.gentoo.org Date: Sat, 26 Jan 2013 01:10:53 +0100 In-Reply-To: <201301251851.45021.vapier@gentoo.org> References: <201301251851.45021.vapier@gentoo.org> Organization: Gentoo Content-Type: multipart/signed; micalg="pgp-sha512"; protocol="application/pgp-signature"; boundary="=-sNC5iLCn5GnfflFVzUyE" X-Mailer: Evolution 3.6.3 Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-dev@lists.gentoo.org Reply-to: gentoo-dev@lists.gentoo.org Mime-Version: 1.0 X-Archives-Salt: ef8e85d6-ad3f-4772-a088-1966e9989b47 X-Archives-Hash: 293aeb8db79a8de0fc7c472c71afe7a9 --=-sNC5iLCn5GnfflFVzUyE Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable This might be a silly question already answered in a previous thread, but why make it filecaps a USE-enable capability at all ? It's not like libcap is a big dependency and it's not like this is an attempt to make the system more secure by according just the privileges needed for apps to work as intended, right ? If the USE flag must stay, how is it different that current caps USE flag ? It applies and not just enables support but is that relevant to the purpose at hand ? --=20 Gilles Dartiguelongue Gentoo --=-sNC5iLCn5GnfflFVzUyE Content-Type: application/pgp-signature; name="signature.asc" Content-Description: This is a digitally signed message part Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.19 (GNU/Linux) iEYEABEKAAYFAlEDHw0ACgkQ1fmVwcYIWAbRHACfRGNtIa/abKk5lG0kBS6H1w0N +LEAoMcELqGqA+ujlxf5rC354clbnlAu =rP2H -----END PGP SIGNATURE----- --=-sNC5iLCn5GnfflFVzUyE--