Hi Kees, I mean capabilities described for example in this article: <a href="http://www.friedhoff.org/posixfilecaps.html">http://www.friedhoff.org/posixfilecaps.html</a> It would be better to have system without SUID executable files. Afterall, it is not so complicated:) Michal <div class="gmail_quote">On Thu, Mar 12, 2009 at 6:46 PM, Kees Cook <<a href="mailto:kees@ubuntu.com">kees@ubuntu.com</a>> wrote: <blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"> Hi Michal, <div class="im"> On Thu, Mar 12, 2009 at 11:27:56AM +0100, Michal Zimen wrote: > Would be in Jaunty release used File POSIX Capabilities by default ? > I found in Intrepid only libcap2-bin package but there is no pam module > for capabilities. </div>What is needed for PAM? There is a long-lost patch to pam_limits to allow capability-fiddling-syntax, but I would assume that's not what you're looking for? Is there a specific patch you're interested in for PAM? -Kees -- Kees Cook Ubuntu Security Team </blockquote></div> -- --mizu-- "Every man dies; not every man really lives." --William Wallace**, Braveheart ** Who certainly would have voted Fera, if he lived again [<a href="http://volimfera.blogspot.com">http://volimfera.blogspot.com</a>] **