You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Serge E. Hallyn 8ec2328f11 file capabilities: don't prevent signaling setuid root programs ... An unprivileged process must be able to kill a setuid root program started by the same user. This is legacy behavior needed for instance for xinit to kill X when the window manager exits. When an unprivileged user runs a setuid root program in !SECURE_NOROOT mode, fP, fI, and fE are set full on, so pP' and pE' are full on. Then cap_task_kill() prevents the user from signaling the setuid root task. This is a change in behavior compared to when !CONFIG_SECURITY_FILE_CAPABILITIES. This patch introduces a special check into cap_task_kill() just to check whether a non-root user is signaling a setuid root program started by the same user. If so, then signal is allowed. Signed-off-by: Serge E. Hallyn <serue@us.ibm.com> Cc: Andrew Morgan <morgan@kernel.org> Cc: Stephen Smalley <sds@epoch.ncsc.mil> Cc: Chris Wright <chrisw@sous-sol.org> Cc: James Morris <jmorris@namei.org> Cc: Casey Schaufler <casey@schaufler-ca.com> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>		17 years ago
..
keys	…
selinux	SELinux: add more validity checks on policy load	17 years ago
Kconfig	Implement file posix capabilities	18 years ago
Makefile	…
capability.c	Implement file posix capabilities	18 years ago
commoncap.c	file capabilities: don't prevent signaling setuid root programs	17 years ago
dummy.c	V3 file capabilities: alter behavior of cap_setpcap	18 years ago
inode.c	security/ cleanups	18 years ago
root_plug.c	…
security.c	security/ cleanups	18 years ago