Good comment describing how various CAP_* are de facto equivalent to root: https://lwn.net/Articles/971891/
This is not news, of course, but it's interesting to see it spelled out. Are there other pages/lists like this? Maybe even a cap-to-root script/program..?
#LinuxKernel #LinuxSecurity #infosec
Vegard Nossum 🥑 /
npub132…kujzl
2024-05-01 09:30:31
Author Public Key
npub132jrx64yjct7nqsqupf0jzg6qv9qg54fw2lszkczr9edn6csss7s3kujzlSeen on
wss://relay.nostr.bandPublished at
2024-05-01 09:30:31Event JSON
{
"id": "17c8ceb7b89d853b7da494630b96c3e476dda4fbb2884a267547e14491f7e05e",
"pubkey": "8aa4336aa49617e98200e052f9091a030a0452a972bf015b021972d9eb10843d",
"created_at": 1714555831,
"kind": 1,
"tags": [
[
"t",
"linuxkernel"
],
[
"t",
"infosec"
],
[
"t",
"linuxsecurity"
],
[
"proxy",
"https://mastodon.social/users/vegard/statuses/112365131001894332",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://mastodon.social/users/vegard/statuses/112365131001894332",
"pink.momostr"
]
],
"content": "Good comment describing how various CAP_* are de facto equivalent to root: https://lwn.net/Articles/971891/\n\nThis is not news, of course, but it's interesting to see it spelled out. Are there other pages/lists like this? Maybe even a cap-to-root script/program..?\n\n#LinuxKernel #LinuxSecurity #infosec",
"sig": "2082256a3531198f447921ac5a0ab7c0f72c208a83e86d3bdac5e034243bd90b6a73689bdcbeaaedcf93409240f6292aa8ef1572396b78eca25d8f93cf9303ed"
}