Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1761435AbZD3AiW (ORCPT ); Wed, 29 Apr 2009 20:38:22 -0400 Received: (majordomo@vger.kernel.org) by vger.kernel.org id S1753595AbZD3AiM (ORCPT ); Wed, 29 Apr 2009 20:38:12 -0400 Received: from tundra.namei.org ([65.99.196.166]:36436 "EHLO tundra.namei.org" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1753536AbZD3AiM (ORCPT ); Wed, 29 Apr 2009 20:38:12 -0400 Date: Thu, 30 Apr 2009 10:37:35 +1000 (EST) From: James Morris To: Oleg Nesterov cc: David Howells , Eric Paris , Roland McGrath , Stephen Smalley , linux-kernel@vger.kernel.org Subject: Re: Q: selinux_bprm_committed_creds() && signals/do_wait In-Reply-To: <20090429132844.GB29151@redhat.com> Message-ID: References: <19024.1241008933@redhat.com> <20090429115550.GA25368@redhat.com> <20090429102511.GA10767@redhat.com> <20090429065809.GA477@redhat.com> <20090428223025.GA11997@redhat.com> <7242.1240999370@redhat.com> <7150.1241003840@redhat.com> <19233.1241009105@redhat.com> <20090429132844.GB29151@redhat.com> User-Agent: Alpine 2.00 (LRH 1167 2008-08-23) MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 1154 Lines: 30 On Wed, 29 Apr 2009, Oleg Nesterov wrote: > On 04/29, David Howells wrote: > > > > From: David Howells > > Subject: [PATCH] SELinux: Don't flush inherited SIGKILL during execve() > > > > Don't flush inherited SIGKILL during execve() in SELinux's post cred commit > > hook. This isn't really a security problem: if the SIGKILL came before the > > credentials were changed, then we were right to receive it at the time, and > > should honour it; if it came after the creds were changed, then we definitely > > should honour it; and in any case, all that will happen is that the process > > will be scrapped before it ever returns to userspace. > > > > Signed-off-by: David Howells > > Signed-off-by: Oleg Nesterov Applied to git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/security-testing-2.6#next -- James Morris -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/