lcap

Susan Cragin susancragin at earthlink.net
Wed Apr 7 09:40:19 EDT 2010


Wild guess... 
I bet that was when the standard security commands in Ubuntu got replaced with the security commands of SE Linux. 
http://en.wikipedia.org/wiki/Security-Enhanced_Linux



-----Original Message-----
>Hi,
>
>I was doing a bit of catching up on security issues on Linux, and I
>noticed on Ubuntu 9.10 that the lcap command that used to be available
>about five years ago seems to have disappeared.
>
>lcap and its friends used to allow you to turn off capabilities in the
>kernel so once you had made your files immutable with chattr you could
>stop people from changing the immutable permissions again (until you
>rebooted) by removing the ability of the kernel to change the
>"immutable" flag.
>
>Has lcap functionality been deprecated?  Is there some other method of
>controlling this?  Is libcap-2 (sucap, execap, getpcaps, setpcaps) now
>the preferred mechanism?  I do not seem to find much "support" or
>information for libcap-2 either, at least in Ubuntu, but then again I am
>looking at the desktop version and not the server version.
>
>Thanks,
>
>md





More information about the gnhlug-discuss mailing list