Messages in this thread | | | Date | Fri, 13 Jan 2012 17:45:47 +0100 | From | Oleg Nesterov <> | Subject | Re: [PATCH] Add PR_{GET,SET}_NO_NEW_PRIVS to prevent execve from granting privs |
| |
On 01/12, Andy Lutomirski wrote: > > --- a/kernel/fork.c > +++ b/kernel/fork.c > @@ -1117,6 +1117,8 @@ static struct task_struct *copy_process(unsigned long clone_flags, > if (retval < 0) > goto bad_fork_free; > > + p->no_new_privs = current->no_new_privs;
unnecessary, this is copied by dup_task_struct().
Oleg.
| |