Merge tag 'v3.4-rc5' into next
Linux 3.4-rc5
Merge to pull in prerequisite change for Smack:
86812bb0de
Requested by Casey.
This commit is contained in:
@@ -29,6 +29,7 @@
|
||||
#include <linux/securebits.h>
|
||||
#include <linux/user_namespace.h>
|
||||
#include <linux/binfmts.h>
|
||||
#include <linux/personality.h>
|
||||
|
||||
/*
|
||||
* If a non-root user executes a setuid-root binary in
|
||||
@@ -505,6 +506,11 @@ int cap_bprm_set_creds(struct linux_binprm *bprm)
|
||||
}
|
||||
skip:
|
||||
|
||||
/* if we have fs caps, clear dangerous personality flags */
|
||||
if (!cap_issubset(new->cap_permitted, old->cap_permitted))
|
||||
bprm->per_clear |= PER_CLEAR_ON_SETID;
|
||||
|
||||
|
||||
/* Don't let someone trace a set[ug]id/setpcap binary with the revised
|
||||
* credentials unless they have the appropriate permit.
|
||||
*
|
||||
|
Reference in New Issue
Block a user