insmod and capabilty

[Evan Teitelman]

On Sat, Jan 25, 2014 at 03:26:09PM +0200, Kevin Wilson wrote:
> Hi,
> Does "insmod" needs some capability ?
> Is there a capability which when not set, you cannot run
> perform insmod of a kernel module ? I don't see such capability
> in man 7 capabilities.

The capability is CAP_SYS_MODULE. See init_module(2).

> 
> regards,
> Kevin
> 
> _______________________________________________
> Kernelnewbies mailing list
> Kernelnewbies at kernelnewbies.org
> http://lists.kernelnewbies.org/mailman/listinfo/kernelnewbies
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 490 bytes
Desc: not available
Url : http://lists.kernelnewbies.org/pipermail/kernelnewbies/attachments/20140125/a596c412/attachment.bin