]> git.baikalelectronics.ru Git - kernel.git/commit
LSM: SafeSetID: Add setgroups() security policy handling
authorMicah Morton <mortonm@chromium.org>
Wed, 8 Jun 2022 22:27:27 +0000 (22:27 +0000)
committerMicah Morton <mortonm@chromium.org>
Fri, 15 Jul 2022 18:24:42 +0000 (18:24 +0000)
commit43e3980167ba3835b6789859ab00249a7cdd0f17
treed3b13ec3478c892518fc3a482a816c3a5e9a4c7c
parentd7086dd6c14826ed14695910c67135181b785f34
LSM: SafeSetID: Add setgroups() security policy handling

The SafeSetID LSM has functionality for restricting setuid()/setgid()
syscalls based on its configured security policies. This patch adds the
analogous functionality for the setgroups() syscall. Security policy
for the setgroups() syscall follows the same policies that are
installed on the system for setgid() syscalls.

Signed-off-by: Micah Morton <mortonm@chromium.org>
security/safesetid/lsm.c