Eric W. Biederman 4accc8c8e2 groups: Consolidate the setgroups permission checks ...

commit 7ff4d90b4c upstream.

Today there are 3 instances of setgroups and due to an oversight their
permission checking has diverged.  Add a common function so that
they may all share the same permission checking code.

This corrects the current oversight in the current permission checks
and adds a helper to avoid this in the future.

A user namespace security fix will update this new helper, shortly.

Signed-off-by: "Eric W. Biederman" <ebiederm@xmission.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2015-01-08 09:58:16 -08:00

..

cpu

sched, idle: Fix the idle polling state logic

2013-11-29 11:11:42 -08:00

debug

kgdb/sysrq: fix inconstistent help message of sysrq key

2013-04-30 17:04:10 -07:00

events

uprobes, x86: Fix _TIF_UPROBE vs _TIF_NOTIFY_RESUME

2014-12-06 15:05:46 -08:00

gcov

…

irq

genirq: Sanitize spurious interrupt detection of threaded irqs

2014-06-30 20:09:45 -07:00

power

PM / Sleep: fix recovery during resuming from hibernation

2014-11-14 08:48:00 -08:00

sched

printk: rename printk_sched to printk_deferred

2014-08-07 14:30:26 -07:00

time

alarmtimer: Lock k_itimer during timer callback

2014-10-05 14:54:14 -07:00

trace

tracing/syscalls: Ignore numbers outside NR_syscalls' range

2014-11-14 08:47:53 -08:00

.gitignore

kernel/hz.bc: ignore.

2013-04-22 07:09:06 -07:00

acct.c

fs: Fix hang with BSD accounting on frozen filesystem

2013-05-04 14:57:58 -04:00

async.c

async: rename and redefine async_func_ptr

2013-03-12 13:59:14 -07:00

audit_tree.c

audit: keep inode pinned

2014-11-21 09:22:52 -08:00

audit_watch.c

…

audit.c

CAPABILITIES: remove undefined caps from all processes

2014-09-17 09:03:57 -07:00

audit.h

audit: fix mq_open and mq_unlink to add the MQ root as a hidden parent audit_names record

2013-12-04 10:57:03 -08:00

auditfilter.c

auditfilter.c: fix kernel-doc warnings

2013-05-24 16:22:52 -07:00

auditsc.c

auditsc: audit_krule mask accesses need bounds checking

2014-06-16 13:42:53 -07:00

backtracetest.c

…

bounds.c

…

capability.c

CAPABILITIES: remove undefined caps from all processes

2014-09-17 09:03:57 -07:00

cgroup_freezer.c

…

cgroup.c

cgroup: use a dedicated workqueue for cgroup destruction

2013-12-04 10:57:20 -08:00

compat.c

Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/signal

2013-05-01 07:21:43 -07:00

configs.c

proc: Supply PDE attribute setting accessor functions

2013-05-01 17:29:18 -04:00

context_tracking.c

Merge branch 'sched-urgent-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

2013-06-20 08:18:35 -10:00

cpu_pm.c

…

cpu.c

sched: Fix hotplug vs. set_cpus_allowed_ptr()

2014-06-11 12:03:24 -07:00

cpuset.c

cpuset,mempolicy: fix sleeping function called from invalid context

2014-07-17 15:58:00 -07:00

crash_dump.c

…

cred.c

…

delayacct.c

…

dma.c

…

elfcore.c

…

exec_domain.c

…

exit.c

introduce for_each_thread() to replace the buggy while_each_thread()

2014-10-05 14:54:15 -07:00

extable.c

extable: Flip the sorting message

2013-04-15 13:25:16 +02:00

fork.c

perf: fix perf bug in fork()

2014-10-09 12:18:42 -07:00

freezer.c

freezer: Do not freeze tasks killed by OOM killer

2014-11-14 08:47:58 -08:00

futex_compat.c

…

futex.c

futex: Make lookup_pi_state more robust

2014-06-07 13:25:41 -07:00

groups.c

groups: Consolidate the setgroups permission checks

2015-01-08 09:58:16 -08:00

hrtimer.c

hrtimer: Set expiry time before switch_hrtimer_base()

2014-06-07 13:25:31 -07:00

hung_task.c

…

irq_work.c

…

itimer.c

…

jump_label.c

…

kallsyms.c

kernel: kallsyms: memory override issue, need check destination buffer length

2013-04-15 15:17:26 +09:30

kcmp.c

kcmp: fix standard comparison bug

2014-10-05 14:54:13 -07:00

Kconfig.freezer

…

Kconfig.hz

…

Kconfig.locks

locking/mutex: Disable optimistic spinning on some architectures

2014-07-28 08:00:07 -07:00

Kconfig.preempt

…

kexec.c

PCI: Disable Bus Master only on kexec reboot

2013-12-20 07:45:08 -08:00

kmod.c

usermodehelper: check subprocess_info->path != NULL

2013-05-16 12:01:11 -07:00

kprobes.c

kprobes: Fix to free gone and unused optprobes

2013-05-28 10:37:59 +02:00

ksysfs.c

…

kthread.c

kthread: implement probe_kthread_data()

2013-04-30 17:04:02 -07:00

latencytop.c

…

lglock.c

…

lockdep_internals.h

…

lockdep_proc.c

…

lockdep_states.h

…

lockdep.c

Merge branch 'for-3.10/drivers' of git://git.kernel.dk/linux-block

2013-05-08 11:51:05 -07:00

Makefile

Merge tag 'modules-next-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/rusty/linux

2013-05-05 10:58:06 -07:00

modsign_certificate.S

CONFIG_SYMBOL_PREFIX: cleanup.

2013-03-15 15:09:43 +10:30

modsign_pubkey.c

…

module_signing.c

…

module-internal.h

…

module.c

modules, lock around setting of MODULE_STATE_UNFORMED

2014-11-14 08:47:55 -08:00

mutex-debug.c

…

mutex-debug.h

…

mutex.c

mutex: Back out architecture specific check for negative mutex count

2013-04-19 09:33:36 +02:00

mutex.h

…

notifier.c

…

nsproxy.c

proc: Split the namespace stuff out into linux/proc_ns.h

2013-05-01 17:29:39 -04:00

padata.c

…

panic.c

dump_stack: implement arch-specific hardware description in task dumps

2013-04-30 17:04:02 -07:00

params.c

params: Fix potential memory leak in add_sysfs_param()

2013-03-18 11:40:21 +00:00

pid_namespace.c

pid_namespace: pidns_get() should check task_active_pid_ns() != NULL

2014-04-26 17:15:34 -07:00

pid.c

pidns: Fix hang in zap_pid_ns_processes by sending a potentially extra wakeup

2013-09-26 17:18:27 -07:00

posix-cpu-timers.c

posix_timers: Fix pre-condition to stop the tick on full dynticks

2013-04-22 19:59:25 +02:00

posix-timers.c

posix-timers: Fix stack info leak in timer_create()

2014-11-14 08:48:00 -08:00

printk.c

printk: rename printk_sched to printk_deferred

2014-08-07 14:30:26 -07:00

profile.c

proc: Supply PDE attribute setting accessor functions

2013-05-01 17:29:18 -04:00

ptrace.c

exec/ptrace: fix get_dumpable() incorrect tests

2013-11-29 11:11:44 -08:00

range.c

range: Do not add new blank slot with add_range_with_merge

2013-06-18 11:32:10 -05:00

rcu.h

…

rcupdate.c

…

rcutiny_plugin.h

…

rcutiny.c

…

rcutorture.c

…

rcutree_plugin.h

rcu: Don't allocate bootmem from rcu_init()

2013-05-15 10:41:12 -07:00

rcutree_trace.c

rcutrace: single_open() leaks

2013-05-05 00:16:35 -04:00

rcutree.c

rcu: Fix deadlock with CPU hotplug, RCU GP init, and timer migration

2013-06-10 13:37:12 -07:00

rcutree.h

rcu: Don't call wakeup() with rcu_node structure ->lock held

2013-06-10 13:37:11 -07:00

relay.c

Merge branch 'for-3.10/core' of git://git.kernel.dk/linux-block

2013-05-08 10:13:35 -07:00

res_counter.c

…

resource.c

mem hotunplug: fix kfree() of bootmem memory

2013-04-29 15:54:40 -07:00

rtmutex_common.h

…

rtmutex-debug.c

…

rtmutex-debug.h

rtmutex: Handle deadlock detection smarter

2014-07-17 15:58:04 -07:00

rtmutex-tester.c

locking/rtmutex/tester: Set correct permissions on sysfs files

2013-04-10 14:48:37 +02:00

rtmutex.c

rtmutex: Plug slow unlock race

2014-07-17 15:58:04 -07:00

rtmutex.h

rtmutex: Handle deadlock detection smarter

2014-07-17 15:58:04 -07:00

rwsem.c

Revert "rw_semaphore: remove up/down_read_non_owner"

2013-03-23 15:53:52 -07:00

seccomp.c

seccomp: allow BPF_XOR based ALU instructions.

2013-03-26 11:07:19 +11:00

semaphore.c

semaphore: use `bool' type for semaphore_waiter's up

2013-04-30 17:04:08 -07:00

signal.c

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next

2013-05-01 14:08:52 -07:00

smp.c

kernel/smp.c:on_each_cpu_cond(): fix warning in fallback path

2014-09-17 09:03:57 -07:00

smpboot.c

kthread: Prevent unpark race which puts threads on the wrong cpu

2013-04-12 14:18:43 +02:00

smpboot.h

…

softirq.c

irq: Force hardirq exit's softirq processing on its own stack

2013-10-13 16:08:34 -07:00

spinlock.c

…

srcu.c

…

stacktrace.c

…

stop_machine.c

…

sys_ni.c

unify compat fanotify_mark(2), switch to COMPAT_SYSCALL_DEFINE

2013-05-09 13:46:38 -04:00

sys.c

reboot: rigrate shutdown/reboot to boot cpu

2013-06-12 16:29:44 -07:00

sysctl_binary.c

switch compat_sys_sysctl to COMPAT_SYSCALL_DEFINE

2013-05-09 14:53:20 -04:00

sysctl.c

perf: Enforce 1 as lower limit for perf_event_max_sample_rate

2014-06-11 12:03:27 -07:00

task_work.c

…

taskstats.c

…

test_kprobes.c

kernel/: rename random32() to prandom_u32()

2013-04-29 18:28:42 -07:00

time.c

jiffies: Fix timeval conversion to jiffies

2014-10-09 12:18:43 -07:00

timeconst.bc

…

timer.c

timer: Prevent overflow in apply_slack

2014-06-07 13:25:30 -07:00

tracepoint.c

tracepoint: Do not waste memory on mods with no tracepoints

2014-05-30 21:52:11 -07:00

tsacct.c

…

uid16.c

groups: Consolidate the setgroups permission checks

2015-01-08 09:58:16 -08:00

up.c

…

user_namespace.c

user namespace: fix incorrect memory barriers

2014-04-26 17:15:34 -07:00

user-return-notifier.c

…

user.c

Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs

2013-05-01 17:51:54 -07:00

utsname_sysctl.c

…

utsname.c

proc: Split the namespace stuff out into linux/proc_ns.h

2013-05-01 17:29:39 -04:00

wait.c

…

watchdog.c

watchdog: Add comments to explain the watchdog_disabled variable

2013-03-14 08:24:05 +01:00

workqueue_internal.h

workqueue: include workqueue info when printing debug dump of a worker task

2013-04-30 17:04:02 -07:00

workqueue.c

workqueue: zero cpumask of wq_numa_possible_cpumask on init

2014-07-17 15:58:00 -07:00