REST API for creating baby capabilities

[Seth Arnold]

On Mon, Nov 16, 2015 at 06:22:23PM +0100, Zygmunt Krynicki wrote:
> I'm slowly progressing towards having an API for capabilities. The API
> is very simple, all you can do is create, list and remove capablity
> objects. This is still pre-usefulness stage. Still, I'd love to

I'm quite surprised by the delete call; I thought caps were much like
AppArmor abstraction files, not actually doing anything until they are
included into a policy of some sort.

When would someone want to delete a capability? Why? Who is allowed to do
so and what recourses exist if one was deleted accidentally?

Thanks
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 473 bytes
Desc: Digital signature
URL: <https://lists.ubuntu.com/archives/snappy-devel/attachments/20151116/05802a82/attachment.pgp>