Re: [B.A.T.M.A.N.] [PATCH] alfred: Drop capabilities when not needed

On Saturday 28 February 2015 21:04:19 MK wrote:

Hi!

Thanks for the patch. Setup seems to be still working. How can I verify that privileges really dropped?

There are further questions:

Is _read_ access for the alfred user (resp. group) sufficient in /sys/kernel/debug/batman_adv/* ? Or is write access on the socket file in this directory mandatory for full functionality?

Read functionality should be enough. We are only reading the originator table and (global) translation table.

Cheers, Simon