This is what I do by setting caps at compile time, they aren’t a runtime feature. You either compile out code without a grant or it errors.
replyHow will you allow permissions for a `ls` style tool? I want to be able to do `ls /etc`.
replyThe tool parses its command line, claims the capabilities it needs, drops everything else, then runs.
replyOr the language it’s written in allows writing a function that takes a recursive enumerate capability on a directory plus a write capability to stdout.
A while back I sent a brain dump email to LKML about “path capabilities”. Maybe I’ll try to implement it.
Probably on a directory read basis. I’d need to give it more thought.
replyThanks for the thoughtful question!