]> git.baikalelectronics.ru Git - kernel.git/commit
yama: Better permission check for ptraceme
authorEric W. Biederman <ebiederm@xmission.com>
Thu, 21 Mar 2013 09:30:41 +0000 (02:30 -0700)
committerEric W. Biederman <ebiederm@xmission.com>
Tue, 26 Mar 2013 20:17:58 +0000 (13:17 -0700)
commit9693a5a49632f9dc095a69e5e144767bb611ddc2
treed1d4eea461dbd3b32e09079f00fccac6fde07e2c
parent30fca9d1dfbab99babe2e9da484ee5c4695e659e
yama:  Better permission check for ptraceme

Change the permission check for yama_ptrace_ptracee to the standard
ptrace permission check, testing if the traceer has CAP_SYS_PTRACE
in the tracees user namespace.

Reviewed-by: Kees Cook <keescook@chromium.org>
Signed-off-by: "Eric W. Biederman" <ebiederm@xmission.com>
security/yama/yama_lsm.c