Re: Changing ACLs as non-owner

[Jan Strohbehn <jstrohbehn@xxxxxxxxxx>]

Hi Tim!!

Thanks for this hint!
Just tried it and it works (altough I just know how to set caps for the
whole system).
A little bit off topic, but can anyone tell me how to set this for a
single process (or just point me to any documentation about this ;-)

Thank you,
Jan

> > Is it possible to set ACLs on a file or directory if you are not the
> > native owner (e.g. member of the primary group) ???
> >
> To change the ACL you need to be the owner or have
> CAP_FOWNER capability.
>
> >From the code:
>     if (!error && va.va_uid != current->fsuid &&
>       !capable(CAP_FOWNER))
>           error = EACCES;
>
> --Tim
>