diff options
| author | David Howells <[email protected]> | 2008-11-13 23:39:14 +0000 |
|---|---|---|
| committer | James Morris <[email protected]> | 2008-11-13 23:39:14 +0000 |
| commit | 1cdcbec1a3372c0c49c59d292e708fd07b509f18 (patch) | |
| tree | d1bd302c8d66862da45b494cbc766fb4caa5e23e /fs/proc/array.c | |
| parent | KEYS: Alter use of key instantiation link-to-keyring argument (diff) | |
| download | kernel-1cdcbec1a3372c0c49c59d292e708fd07b509f18.tar.gz kernel-1cdcbec1a3372c0c49c59d292e708fd07b509f18.zip | |
CRED: Neuter sys_capset()
Take away the ability for sys_capset() to affect processes other than current.
This means that current will not need to lock its own credentials when reading
them against interference by other processes.
This has effectively been the case for a while anyway, since:
(1) Without LSM enabled, sys_capset() is disallowed.
(2) With file-based capabilities, sys_capset() is neutered.
Signed-off-by: David Howells <[email protected]>
Acked-by: Serge Hallyn <[email protected]>
Acked-by: Andrew G. Morgan <[email protected]>
Acked-by: James Morris <[email protected]>
Signed-off-by: James Morris <[email protected]>
Diffstat (limited to 'fs/proc/array.c')
0 files changed, 0 insertions, 0 deletions