RE: [cobalt-users] "Chattr +i" on inetd.conf & the GUI

[flash22@xxxxxxx]

On Tue, 21 Aug 2001, Berg, Guy van den wrote:

> securelevel. However as far as I understood it securelevel was removed in
> linux 2.2.* and replaced with capabilites (a POSIX idea), are these at a
> usable stage yet? I thought they weren't although I'm more than prepared to
> admit I could be very wrong ;)

Probably not, the posix stuff went in around 2.3, but a few things got
forgotten making it useless....there are still almost no tools, the
eventual idea i think was to integrate it with ACL stuff...

The prototype FAQ is at
ftp://ftp.guardian.no/pub/free/linux/capabilities/capfaq.txt 
incidently...

Ironicly, the posix standard that it's all based on doesn't actually
exist, the posix folks never finished it ....sigh

2.0 will support the older securelevel flag with patches to the kernel,
2.2 i think supports it without much patching, but a new init is needed in
any case to set the flag early enough in boot...

It would be nice if it got finished and came with nice tools ;)

gsh