diff options
| author | Stephen Smalley <[email protected]> | 2006-03-11 11:27:16 +0000 |
|---|---|---|
| committer | Linus Torvalds <[email protected]> | 2006-03-11 17:19:34 +0000 |
| commit | 341c2d806b71cc3596afeb2d9bd26cd718e75202 (patch) | |
| tree | 851a5b5cab5b836c8021bdac89a9a257887ede69 /security/selinux/hooks.c | |
| parent | [PATCH] edac: disable a few sysfs files to avoid them becoming an ABI (diff) | |
| download | kernel-341c2d806b71cc3596afeb2d9bd26cd718e75202.tar.gz kernel-341c2d806b71cc3596afeb2d9bd26cd718e75202.zip | |
[PATCH] selinux: tracer SID fix
Fix SELinux to not reset the tracer SID when the child is already being
traced, since selinux_ptrace is also called by proc for access checking
outside of the context of a ptrace attach.
Signed-off-by: Stephen Smalley <[email protected]>
Acked-by: James Morris <[email protected]>
Acked-by: Chris Wright <[email protected]>
Signed-off-by: Andrew Morton <[email protected]>
Signed-off-by: Linus Torvalds <[email protected]>
Diffstat (limited to 'security/selinux/hooks.c')
| -rw-r--r-- | security/selinux/hooks.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/security/selinux/hooks.c b/security/selinux/hooks.c index b7773bf68efa..b65c201e9ff5 100644 --- a/security/selinux/hooks.c +++ b/security/selinux/hooks.c @@ -1262,7 +1262,7 @@ static int selinux_ptrace(struct task_struct *parent, struct task_struct *child) rc = task_has_perm(parent, child, PROCESS__PTRACE); /* Save the SID of the tracing process for later use in apply_creds. */ - if (!rc) + if (!(child->ptrace & PT_PTRACED) && !rc) csec->ptrace_sid = psec->sid; return rc; } |