Re: ethernet cards & promisc mode

[lamont () ICOPYRIGHT COM (Granquist, Lamont)]

Nope, much uglier...

from /usr/include/linux/capability.h:

#define CAP_NET_ADMIN        12

2^12 = 0x00001000
(bitwise not) 0x00001000 = 0xffffefff
echo "0xffffefff" > /proc/sys/kernel/cap-bound

as unpriv user whatever bits are unset get cleared, set bits are unchanged

or use lcap-0.0.3 (freshmeat?) which lets you use the names

On Sun, 7 May 2000, Bluefish wrote:
> Correct file is (linux 2.2.x):
> /usr/include/linux/capability.h
>
> I find no docs over how cap-bound works. Is the following correct?
>
> echo "CAP_NET_ADMIN = 0" >> /proc/sys/kernel/cap-bound
>
> ..:::::::::::::::::::::::::::::::::::::::::::::::::..
>      http://www.11a.nu || http://bluefish.11a.nu
>     eleventh alliance development & security team