]> git.baikalelectronics.ru Git - kernel.git/commit
LSM: SafeSetID: Add setgroups() security policy handling
authorMicah Morton <mortonm@chromium.org>
Wed, 8 Jun 2022 22:27:27 +0000 (22:27 +0000)
committerMicah Morton <mortonm@chromium.org>
Fri, 15 Jul 2022 18:24:42 +0000 (18:24 +0000)
commit4b0bc81dd278c3736ffd3bd97ac320603e8fc228
treed3b13ec3478c892518fc3a482a816c3a5e9a4c7c
parent646bfbaaf0e728ac01a6abcfe9c9b4b5ddaafa1e
LSM: SafeSetID: Add setgroups() security policy handling

The SafeSetID LSM has functionality for restricting setuid()/setgid()
syscalls based on its configured security policies. This patch adds the
analogous functionality for the setgroups() syscall. Security policy
for the setgroups() syscall follows the same policies that are
installed on the system for setgid() syscalls.

Signed-off-by: Micah Morton <mortonm@chromium.org>
security/safesetid/lsm.c