]> git.baikalelectronics.ru Git - kernel.git/commit
capabilities: add (back) dummy support for KEEPCAPS
authorAndrew G. Morgan <morgan@kernel.org>
Thu, 12 Jun 2008 22:21:33 +0000 (15:21 -0700)
committerLinus Torvalds <torvalds@linux-foundation.org>
Fri, 13 Jun 2008 01:05:40 +0000 (18:05 -0700)
commit84fdf66c5e12bfa0da62df00a71d943361d9bf61
treee42ddc9142988fffb2b4128e2d94b3913914dbe6
parentb3d8565b8d457a3ce69e9d7d1331583a1b1003b2
capabilities: add (back) dummy support for KEEPCAPS

The dummy module is used by folk that run security conscious code(!?).  A
feature of such code (for example, dhclient) is that it tries to operate
with minimum privilege (dropping unneeded capabilities).  While the dummy
module doesn't restrict code execution based on capability state, the user
code expects the kernel to appear to support it.  This patch adds back
faked support for the PR_SET_KEEPCAPS etc., calls - making the kernel
behave as before 2.6.26.

For details see: http://bugzilla.kernel.org/show_bug.cgi?id=10748

Signed-off-by: Andrew G. Morgan <morgan@kernel.org>
Acked-by: Serge Hallyn <serue@us.ibm.com>
Cc: James Morris <jmorris@namei.org>
Cc: Stephen Smalley <sds@tycho.nsa.gov>
Cc: Chris Wright <chrisw@sous-sol.org>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
security/dummy.c