Messages in this thread | | | Date | Thu, 8 Mar 2012 00:33:04 +0400 | From | Cyrill Gorcunov <> | Subject | Re: [PATCH] prctl: Use CAP_SYS_RESOUCE for PR_SET_MM option |
| |
On Wed, Mar 07, 2012 at 09:29:28PM +0100, Paul Bolle wrote: > On Wed, 2012-03-07 at 16:52 +0400, Cyrill Gorcunov wrote: > > CAP_SYS_ADMIN is already overloaded left and right, > > so to have more finegrained access control use > > CAP_SYS_RESOUCE here. > > > > The CAP_SYS_RESOUCE is chosen because this prctl > > option allows a current process to adjust some > > fields of memory map descriptor which rather > > represent what the process owns: pointers to > > code, data, stack segments, command line, > > auxilary vector data and etc. > > Nitpicking: s/CAP_SYS_RESOUCE/CAP_SYS_RESOURCE/ in both the commit > summary and the commit explanation. (And if you change that you might > also do a s/auxilary/auxiliary/ in the commit explanation.)
Oh, crap! Thanks Paul, patch was unrefreshed, while I was testing correct version. Will update.
To Andrew: Please don't pick it up. I'll refresh and send it out again wtih all Acks.
Cyrill
| |