You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Satyam Sharma 3bd858ab1c Introduce is_owner_or_cap() to wrap CAP_FOWNER use with fsuid check ... Introduce is_owner_or_cap() macro in fs.h, and convert over relevant users to it. This is done because we want to avoid bugs in the future where we check for only effective fsuid of the current task against a file's owning uid, without simultaneously checking for CAP_FOWNER as well, thus violating its semantics. [ XFS uses special macros and structures, and in general looked ... untouchable, so we leave it alone -- but it has been looked over. ] The (current->fsuid != inode->i_uid) check in generic_permission() and exec_permission_lite() is left alone, because those operations are covered by CAP_DAC_OVERRIDE and CAP_DAC_READ_SEARCH. Similarly operations falling under the purview of CAP_CHOWN and CAP_LEASE are also left alone. Signed-off-by: Satyam Sharma <ssatyam@cse.iitk.ac.in> Cc: Al Viro <viro@ftp.linux.org.uk> Acked-by: Serge E. Hallyn <serge@hallyn.com> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>		18 years ago
..
keys	[AF_RXRPC]: Key facility changes for AF_RXRPC	18 years ago
selinux	Introduce is_owner_or_cap() to wrap CAP_FOWNER use with fsuid check	18 years ago
Kconfig	[PATCH] LSM: remove BSD secure level security module	19 years ago
Makefile	[PATCH] LSM: remove BSD secure level security module	19 years ago
capability.c	header cleaning: don't include smp_lock.h when not used	18 years ago
commoncap.c	header cleaning: don't include smp_lock.h when not used	18 years ago
dummy.c	security: Protection for exploiting null dereference using mmap	18 years ago
inode.c	remove "struct subsystem" as it is no longer needed	18 years ago
root_plug.c	…
security.c	security: unexport mmap_min_addr	18 years ago