Messages in this thread | | | Date | Wed, 21 May 2008 22:18:35 -0700 | From | "Andrew G. Morgan" <> | Subject | Re: [PATCH] security: protect legacy apps from insufficient privilege |
| |
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
Serge E. Hallyn wrote: | Quoting Andrew G. Morgan (morgan@kernel.org): | This is a fail-safe additional feature for filesystem capability support. | | Cheers | | Andrew
~From 916b252d3b631214acea6df6c61e94ce6770fdf7 Mon Sep 17 00:00:00 2001 From: Andrew G. Morgan <morgan@kernel.org> Date: Thu, 15 May 2008 23:17:13 -0700 Subject: [PATCH] Protect legacy applications from executing with insufficient privilege. [..]
| Assuming (as it appears) the only change from last time is that you | dropped the part changing cap_bprm_apply_creds() contraints for a | ptraced process, then
Yes. That's the only material change. I also added a comment explaining the "strange" (since it caused some concern last time around) cap_bset | cap_inheritable bit...
| Acked-by: Serge Hallyn <serue@us.ibm.com>
| I'll try to give it a good test-run next week.
Thanks
Andrew -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.6 (GNU/Linux)
iD8DBQFINQIr+bHCR3gb8jsRAjUtAJ0dX67kT3AAtR7gUZgCPiXS2t+nzQCgghmv GSgqeiwwbZXcc6tSh9957Fo= =dmv/ -----END PGP SIGNATURE-----
| |