]> git.proxmox.com Git - mirror_ubuntu-bionic-kernel.git/commit
projects / mirror_ubuntu-bionic-kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 1cce1ee) | patch
exec: Don't reset euid and egid when the tracee has CAP_SETUID
authorEric W. Biederman <ebiederm@xmission.com>
Thu, 17 Nov 2016 07:38:35 +0000 (01:38 -0600)
committerEric W. Biederman <ebiederm@xmission.com>
Mon, 23 Jan 2017 23:03:07 +0000 (12:03 +1300)
commit70169420f555210147f3cab74bb0f6debd488bdb
tree364f9a2a9d576c91178ba0b5d3c1d671da7301batree
parent1cce1eea0aff51201753fcaca421df825b0813b6commit | diff
exec: Don't reset euid and egid when the tracee has CAP_SETUID

Don't reset euid and egid when the tracee has CAP_SETUID in
it's user namespace.  I punted on relaxing this permission check
long ago but now that I have read this code closely it is clear
it is safe to test against CAP_SETUID in the user namespace.

Signed-off-by: "Eric W. Biederman" <ebiederm@xmission.com>
security/commoncap.c diff | blob | blame | history
ubuntu-bionic-kernel mirror