]> git.baikalelectronics.ru Git - kernel.git/commit
projects / kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 1e69d98) | patch
exit_notify: kill the wrong capable(CAP_KILL) check
authorOleg Nesterov <oleg@redhat.com>
Mon, 6 Apr 2009 14:16:02 +0000 (16:16 +0200)
committerLinus Torvalds <torvalds@linux-foundation.org>
Mon, 6 Apr 2009 21:57:23 +0000 (14:57 -0700)
commit6942170b361f67a8d31d1b8aed767c41813fef7c
tree4c9c08d7fb77744b1fd04615a76ab0a9105fad07tree | snapshot
parent1e69d989500d999393ab1789c7e6d8629961f4a8commit | diff
exit_notify: kill the wrong capable(CAP_KILL) check

The CAP_KILL check in exit_notify() looks just wrong, kill it.

Whatever logic we have to reset ->exit_signal, the malicious user
can bypass it if it execs the setuid application before exiting.

Signed-off-by: Oleg Nesterov <oleg@redhat.com>
Acked-by: Serge Hallyn <serue@us.ibm.com>
Acked-by: Roland McGrath <roland@redhat.com>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
kernel/exit.c diff | blob | history
Linux Kernel Source Tree.