[gentoo-dev] Re: fcaps.eclass: bringing filesystem capabilities to the tree

[Duncan <1i5t5.duncan@cox.net>]

Mike Frysinger posted on Sat, 26 Jan 2013 02:46:12 -0500 as excerpted:

> if the package supports USE=caps, then it means the program is
> intelligent enough to know what capabilities it needs and so it can drop
> all of the rest before executing the main body of code.

> wouldn't it be nice if you could set the required capabilities on a
> binary and drop the set*id entirely ?  that's what USE=filecaps gets us.

Very useful summary.  Thanks. =:^)

I had all the pieces from various reading, but they were more in a heap 
than assembled, and just the other day I was trying to assemble them into 
something coherent (triggered by this thread, IIRC), but discovered I 
still needed a bit of help.  This was exactly what I needed for the 
accumulated information to all fall into place!  Thanks again! =:^)

-- 
Duncan - List replies preferred.   No HTML msgs.
"Every nonfree program has a lord, a master --
and if you use the program, he is your master."  Richard Stallman