You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Kees Cook 0e1a6ef2de sysctl: require CAP_SYS_RAWIO to set mmap_min_addr ... Currently the mmap_min_addr value can only be bypassed during mmap when the task has CAP_SYS_RAWIO. However, the mmap_min_addr sysctl value itself can be adjusted to 0 if euid == 0, allowing a bypass without CAP_SYS_RAWIO. This patch adds a check for the capability before allowing mmap_min_addr to be changed. Signed-off-by: Kees Cook <kees.cook@canonical.com> Acked-by: Serge Hallyn <serue@us.ibm.com> Signed-off-by: James Morris <jmorris@namei.org>		15 years ago
..
integrity/ima	LSM: imbed ima calls in the security hooks	15 years ago
keys	…
selinux	SELinux: add .gitignore files for dynamic classes	15 years ago
smack	…
tomoyo	tomoyo: improve hash bucket dispersion	15 years ago
Kconfig	security: remove root_plug	15 years ago
Makefile	security: remove root_plug	15 years ago
capability.c	…
commoncap.c	security: remove root_plug	15 years ago
device_cgroup.c	…
inode.c	…
lsm_audit.c	…
min_addr.c	sysctl: require CAP_SYS_RAWIO to set mmap_min_addr	15 years ago
security.c	LSM: imbed ima calls in the security hooks	15 years ago