This repository has been archived on 2026-03-14. You can view files and clone it, but cannot push or open issues or pull requests.

Eric Paris d52fc5dde1 fcaps: clear the same personality flags as suid when fcaps are used ...

If a process increases permissions using fcaps all of the dangerous
personality flags which are cleared for suid apps should also be cleared.
Thus programs given priviledge with fcaps will continue to have address space
randomization enabled even if the parent tried to disable it to make it
easier to attack.

Signed-off-by: Eric Paris <eparis@redhat.com>
Reviewed-by: Serge Hallyn <serge.hallyn@canonical.com>
Signed-off-by: James Morris <james.l.morris@oracle.com>

2012-04-18 12:37:56 +10:00

..

apparmor

lsm_audit: don't specify the audit pre/post callbacks in 'struct common_audit_data'

2012-04-03 09:49:59 -07:00

integrity

security: fix ima kconfig warning

2012-02-28 11:01:15 +11:00

keys

usermodehelper: kill umh_wait, renumber UMH_* constants

2012-03-23 16:58:41 -07:00

selinux

lsm_audit: don't specify the audit pre/post callbacks in 'struct common_audit_data'

2012-04-03 09:49:59 -07:00

smack

Smack: move label list initialization

2012-04-18 12:02:28 +10:00

tomoyo

usermodehelper: use UMH_WAIT_PROC consistently

2012-03-23 16:58:41 -07:00

yama

Yama: add PR_SET_PTRACER_ANY

2012-02-16 10:25:18 +11:00

capability.c

security: create task_free security callback

2012-02-10 09:14:51 +11:00

commoncap.c

fcaps: clear the same personality flags as suid when fcaps are used

2012-04-18 12:37:56 +10:00

device_cgroup.c

cgroup: remove cgroup_subsys argument from callbacks

2012-02-02 09:20:22 -08:00

inode.c

securityfs: fix object creation races

2012-01-10 10:20:35 -05:00

Kconfig

security: Yama LSM

2012-02-10 09:18:52 +11:00

lsm_audit.c

lsm_audit: don't specify the audit pre/post callbacks in 'struct common_audit_data'

2012-04-03 09:49:59 -07:00

Makefile

security: Yama LSM

2012-02-10 09:18:52 +11:00

min_addr.c

mmap_min_addr check CAP_SYS_RAWIO only for write

2010-04-23 08:56:31 +10:00

security.c

security: trim security.h

2012-02-14 10:45:42 +11:00