Messages in this thread |  | | | Date | Mon, 16 Jan 2012 18:33:09 +0100 | | From | Oleg Nesterov <> | | Subject | Re: [PATCH v2 1/4] Add PR_{GET,SET}_NO_NEW_PRIVS to prevent execve from granting privs |
| |
On 01/15, Andy Lutomirski wrote: > > --- a/kernel/fork.c > +++ b/kernel/fork.c > @@ -1117,6 +1117,8 @@ static struct task_struct *copy_process(unsigned long clone_flags, > if (retval < 0) > goto bad_fork_free; > > + p->no_new_privs = current->no_new_privs;
Again, this is unneeded, ->no_new_privs was copied by dup_task_struct().
Oleg.
|  |