Permissions and capabilities

Then will follow the nodes description. A node is an executable or a directory of the filesystem which is linked to capabilities and/or permissions.

A node description begin with a NODE= declaration :

NODE=dev:inode:/path/to/node
CAPS_INHERIT=NONE|dev:inode:[PARENT:]/path/to/parent
CAPS=(uid|-1),caps,lids_caps,mask,lids_mask
CAPS=(uid|-1),caps,lids_caps,mask,lids_mask
...
PERM_INHERIT=NONE|dev:inode:[PARENT:]/path/to/parent
PERM=perm:dev:inode:/path/to/object
PERM=perm:dev:inode:/path/to/object
...

There must not be any spaces arround the colons (``:''). -1 stands for default capability.

When the keyword ``PARENT'' is used, this mean that the indicated dev:inode and path may change, so that you need to correct this with the configuration tool.

The caps, lids_caps, mask, lids_mask are 32 bits integers written in hexadecimal, without the leading 0x, with lower or upper case.