TODO: extend login capability note

We cannot remove CAP_SYS_ADMIN, which basically makes removing all other capabilities useless. Anyhow, still wouldn't hurt checking whether stuff like CAP_KILL can be dropped from logind.
2026-09-06 05:32:02 +00:00 · 2014-01-05 13:59:12 +01:00
parent 479e339e55
commit e10e429f2d
1 changed files with 1 additions and 0 deletions
@@ -86,6 +86,7 @@ Features:

 * given that logind now lets PID 1 do all nasty work, we can
  probably reduce the capability set it retains substantially.
+  (we need CAP_SYS_ADMIN for drmSetMaster(), so maybe not worth it)

 * btrfs raid assembly: some .device jobs stay stuck in the queue