Files
kernel/include/linux
Micah Morton 40852275a9 LSM: add SafeSetID module that gates setid calls
This change ensures that the set*uid family of syscalls in kernel/sys.c
(setreuid, setuid, setresuid, setfsuid) all call ns_capable_common with
the CAP_OPT_INSETID flag, so capability checks in the security_capable
hook can know whether they are being called from within a set*uid
syscall. This change is a no-op by itself, but is needed for the
proposed SafeSetID LSM.

Signed-off-by: Micah Morton <mortonm@chromium.org>
Acked-by: Kees Cook <keescook@chromium.org>
Signed-off-by: James Morris <james.morris@microsoft.com>
2019-01-25 11:22:43 -08:00
..
2018-12-11 09:57:47 -08:00
2018-11-26 18:41:21 -05:00
2018-12-07 22:26:38 -07:00
2018-12-18 17:50:47 +01:00
2018-12-18 17:50:47 +01:00
2018-12-03 17:40:18 +01:00
2018-12-19 10:42:08 +01:00
2018-12-28 16:55:46 -08:00
2018-12-28 12:11:52 -08:00
2018-12-10 09:22:34 +01:00
2018-12-07 12:59:08 -08:00
2018-12-06 13:57:03 +01:00
2018-11-30 13:29:04 +00:00
2019-01-04 13:13:48 -08:00
2019-01-04 13:13:48 -08:00
2018-12-13 09:58:57 +01:00
2018-12-06 15:45:46 +01:00
2018-12-03 17:11:02 -08:00
2019-01-07 16:38:26 +01:00
2018-12-06 17:22:53 +01:00
2019-01-18 14:05:14 -08:00
2018-12-10 10:17:45 +01:00
2019-01-11 18:05:40 -08:00
2018-12-22 12:15:29 +01:00