Messages in this thread | | | Date | Thu, 31 May 2012 18:42:20 +1000 (EST) | From | James Morris <> | Subject | Re: [PATCH] security: kill security_task_fix_setuid() |
| |
On Thu, 31 May 2012, kosaki.motohiro@gmail.com wrote:
> From: KOSAKI Motohiro <kosaki.motohiro@jp.fujitsu.com> > > commit 72fa5997 (move RLIMIT_NPROC check from set_user() to do_execve_common()) > pointed out set*uid() failure can cause a security problem. > Thus, security_task_fix_setuid() potentially has the same issue. Any security > module shouldn't use it. This patch kills it completely. > > Luckily, any security module don't use it. then, this patch doesn't make any > userland visible change.
Capabilities uses it.
-- James Morris <jmorris@namei.org>
| |