Does every syscall require at most 1 capability on Linux?
Clash Royale CLAN TAG#URR8PPP
up vote
1
down vote
favorite
I am trying to understand the relationship between capabilities and syscalls on Linux.
As far as I know, the capabilities of a process are only ever considered when that process calls a syscall. When some syscalls are called with certain arguments, the syscall will only succeed when that process has certain capabilities.
Is it the case that for a particular syscall with particular arguments to succeed only one capability will ever be required? Or do some syscalls require multiple capabilities when called with a particular set of (or any) arguments?
linux kernel linux-kernel capabilities syscalls
add a comment |
up vote
1
down vote
favorite
I am trying to understand the relationship between capabilities and syscalls on Linux.
As far as I know, the capabilities of a process are only ever considered when that process calls a syscall. When some syscalls are called with certain arguments, the syscall will only succeed when that process has certain capabilities.
Is it the case that for a particular syscall with particular arguments to succeed only one capability will ever be required? Or do some syscalls require multiple capabilities when called with a particular set of (or any) arguments?
linux kernel linux-kernel capabilities syscalls
add a comment |
up vote
1
down vote
favorite
up vote
1
down vote
favorite
I am trying to understand the relationship between capabilities and syscalls on Linux.
As far as I know, the capabilities of a process are only ever considered when that process calls a syscall. When some syscalls are called with certain arguments, the syscall will only succeed when that process has certain capabilities.
Is it the case that for a particular syscall with particular arguments to succeed only one capability will ever be required? Or do some syscalls require multiple capabilities when called with a particular set of (or any) arguments?
linux kernel linux-kernel capabilities syscalls
I am trying to understand the relationship between capabilities and syscalls on Linux.
As far as I know, the capabilities of a process are only ever considered when that process calls a syscall. When some syscalls are called with certain arguments, the syscall will only succeed when that process has certain capabilities.
Is it the case that for a particular syscall with particular arguments to succeed only one capability will ever be required? Or do some syscalls require multiple capabilities when called with a particular set of (or any) arguments?
linux kernel linux-kernel capabilities syscalls
linux kernel linux-kernel capabilities syscalls
asked Nov 20 at 22:32
dippynark
1345
1345
add a comment |
add a comment |
active
oldest
votes
active
oldest
votes
active
oldest
votes
active
oldest
votes
active
oldest
votes
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f483084%2fdoes-every-syscall-require-at-most-1-capability-on-linux%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown