Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S262097AbVADUP6 (ORCPT ); Tue, 4 Jan 2005 15:15:58 -0500 Received: (majordomo@vger.kernel.org) by vger.kernel.org id S262113AbVADUPg (ORCPT ); Tue, 4 Jan 2005 15:15:36 -0500 Received: from fw.osdl.org ([65.172.181.6]:52373 "EHLO mail.osdl.org") by vger.kernel.org with ESMTP id S262107AbVADUPH (ORCPT ); Tue, 4 Jan 2005 15:15:07 -0500 Date: Tue, 4 Jan 2005 12:15:02 -0800 From: Chris Wright To: "Serge E. Hallyn" Cc: Chris Wright , Andrew Morton , Stephen Smalley , James Morris , linux-kernel Subject: Re: [PATCH] properly split capset_check+capset_set Message-ID: <20050104121502.T2357@build.pdx.osdl.net> References: <20050104162745.GA400@IBM-BWN8ZTBWA01.austin.ibm.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <20050104162745.GA400@IBM-BWN8ZTBWA01.austin.ibm.com>; from serue@us.ibm.com on Tue, Jan 04, 2005 at 10:27:45AM -0600 Sender: linux-kernel-owner@vger.kernel.org X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 819 Lines: 23 * Serge E. Hallyn (serue@us.ibm.com) wrote: > The attached patch removes checks from kernel/capability.c which are > redundant with cap_capset_check() code, and moves the capset_check() > calls to immediately before the capset_set() calls. This allows > capset_check() to accurately check the setter's permission to set caps > on the target. Please apply. > > thanks, > -serge > > Signed-off-by: Serge Hallyn Signed-off-by: Chris Wright thanks, -chris -- Linux Security Modules http://lsm.immunix.org http://lsm.bkbits.net - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/