Исходное сообщение
"Релиз ядра Linux 4.3" Отправлено ананим.orig, 02-Ноя-15 11:49
по ссылке всё четко расписано: > Each task has four capability masks: effective (pE), permitted (pP), inheritable (pI), and a bounding set (X) > If you aren't root and you execute an ordinary binary, fI is zero, so your capabilities have no effect whatsoever on pP'. This means that you can't usefully execute a helper process or a shell command with elevated capabilities if you aren't root. > This patch adds a fifth capability mask called the ambient mask (pA). pA does what most people expect pI to do. > … …