]> git.baikalelectronics.ru Git - kernel.git/commit
projects / kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 29627f8) | patch
exec: Don't reset euid and egid when the tracee has CAP_SETUID
authorEric W. Biederman <ebiederm@xmission.com>
Thu, 17 Nov 2016 07:38:35 +0000 (01:38 -0600)
committerEric W. Biederman <ebiederm@xmission.com>
Mon, 23 Jan 2017 23:03:07 +0000 (12:03 +1300)
commit078dad0803b426536ca0907d24da385a2de90a77
tree364f9a2a9d576c91178ba0b5d3c1d671da7301batree | snapshot
parent29627f84d2490f42d0236468560b2709f4e54e85commit | diff
exec: Don't reset euid and egid when the tracee has CAP_SETUID

Don't reset euid and egid when the tracee has CAP_SETUID in
it's user namespace.  I punted on relaxing this permission check
long ago but now that I have read this code closely it is clear
it is safe to test against CAP_SETUID in the user namespace.

Signed-off-by: "Eric W. Biederman" <ebiederm@xmission.com>
security/commoncap.c diff | blob | history
Linux Kernel Source Tree.