TODO: extend login capability note
We cannot remove CAP_SYS_ADMIN, which basically makes removing all other capabilities useless. Anyhow, still wouldn't hurt checking whether stuff like CAP_KILL can be dropped from logind.
This commit is contained in:
parent
479e339e55
commit
e10e429f2d
1
TODO
1
TODO
|
@ -86,6 +86,7 @@ Features:
|
||||||
|
|
||||||
* given that logind now lets PID 1 do all nasty work, we can
|
* given that logind now lets PID 1 do all nasty work, we can
|
||||||
probably reduce the capability set it retains substantially.
|
probably reduce the capability set it retains substantially.
|
||||||
|
(we need CAP_SYS_ADMIN for drmSetMaster(), so maybe not worth it)
|
||||||
|
|
||||||
* btrfs raid assembly: some .device jobs stay stuck in the queue
|
* btrfs raid assembly: some .device jobs stay stuck in the queue
|
||||||
|
|
||||||
|
|
Loading…
Reference in New Issue