Serge Hallyn aedb60a67c
file capabilities: remove cap_task_kill() ...
The original justification for cap_task_kill() was as follows:
check_kill_permission() does appropriate uid equivalence checks.
However with file capabilities it becomes possible for an
unprivileged user to execute a file with file capabilities
resulting in a more privileged task with the same uid.
However now that cap_task_kill() always returns 0 (permission
granted) when p->uid==current->uid, the whole hook is worthless,
and only likely to create more subtle problems in the corner cases
where it might still be called but return -EPERM. Those cases
are basically when uids are different but euid/suid is equivalent
as per the check in check_kill_permission().
One example of a still-broken application is 'at' for non-root users.
This patch removes cap_task_kill().
Signed-off-by: Serge Hallyn <serge@hallyn.com >
Acked-by: Andrew G. Morgan <morgan@kernel.org >
Earlier-version-tested-by: Luiz Fernando N. Capitulino <lcapitulino@mandriva.com.br >
Acked-by: Casey Schaufler <casey@schaufler-ca.com >
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org >
2008-03-20 09:46:36 -07:00
2008-02-08 09:22:32 -08:00
2008-02-07 08:42:23 -08:00
2008-02-08 13:30:02 -08:00
2008-02-07 10:30:48 +00:00
2008-03-10 16:41:06 -07:00
2008-02-14 21:17:08 -08:00
2008-03-04 16:35:18 -08:00
2008-02-20 20:11:49 -05:00
2008-02-10 18:11:16 -05:00
2008-03-10 16:42:26 -07:00
2008-02-08 09:22:30 -08:00
2008-02-14 02:43:39 -05:00
2008-02-19 10:04:00 +01:00
2008-02-24 00:27:33 -05:00
2008-02-08 09:22:38 -08:00
2008-02-14 21:17:08 -08:00
2008-02-19 10:04:00 +01:00
2008-03-04 11:18:17 +01:00
2008-02-07 08:42:25 -08:00
2008-02-13 16:21:18 -08:00
2008-03-04 16:35:12 -08:00
2008-02-23 17:13:24 -08:00
2008-02-09 23:24:09 +01:00
2008-03-04 16:35:12 -08:00
2008-02-14 20:58:05 -08:00
2008-02-26 18:42:44 -08:00
2008-02-14 00:09:55 -05:00
2008-02-11 20:48:29 -08:00
2008-02-08 15:33:33 -08:00
2008-02-14 21:17:09 -08:00
2008-02-14 21:17:08 -08:00
2008-03-04 14:47:06 -08:00
2008-03-04 16:35:12 -08:00
2008-02-08 02:10:01 +00:00
2008-02-11 11:06:35 -05:00
2008-02-08 02:09:56 +00:00
2008-03-04 10:16:46 -07:00
2008-02-08 09:22:24 -08:00
2008-02-08 09:22:37 -08:00
2008-02-07 08:42:06 -08:00
2008-02-08 09:22:30 -08:00
2008-02-07 09:02:26 -08:00
2008-02-29 08:06:37 -08:00
2008-02-07 08:42:30 -08:00
2008-02-07 18:04:10 -06:00
2008-02-07 08:42:25 -08:00
2008-02-13 16:21:19 -08:00
2008-03-07 11:11:13 -08:00
2008-03-14 09:49:57 -07:00
2008-02-07 08:42:27 -08:00
2008-02-25 16:54:37 -05:00
2008-02-10 01:11:44 -05:00
2008-02-13 16:21:18 -08:00
2008-03-10 16:33:33 -07:00
2008-02-14 21:13:33 -08:00
2008-02-19 10:04:00 +01:00
2008-02-23 17:12:15 -08:00
2008-03-12 12:34:37 -07:00
2008-02-13 16:21:18 -08:00
2008-03-04 16:35:10 -08:00
2008-02-29 18:46:50 +01:00
2008-02-07 08:42:34 -08:00
2008-02-19 01:41:26 +01:00
2008-02-11 13:01:51 +01:00
2008-02-10 10:48:03 +01:00
2008-02-13 16:21:18 -08:00
2008-02-07 20:39:44 -05:00
2008-02-24 20:03:42 +01:00
2008-02-11 09:20:50 -08:00
2008-02-23 20:09:11 -08:00
2008-02-19 21:00:18 +01:00
2008-02-07 12:57:44 -08:00
2008-02-13 16:21:18 -08:00
2008-02-19 10:04:00 +01:00
2008-03-04 16:35:17 -08:00
2008-02-08 09:22:26 -08:00
2008-02-08 09:22:23 -08:00
2008-02-13 16:21:18 -08:00
2008-02-07 08:42:33 -08:00
2008-02-07 08:42:34 -08:00
2008-03-19 18:53:36 -07:00
2008-02-08 09:22:29 -08:00
2008-03-17 09:03:05 +01:00
2008-02-08 09:22:41 -08:00
2008-02-07 08:42:25 -08:00
2008-03-04 16:35:11 -08:00
2008-02-14 22:08:30 +01:00
2008-03-04 15:19:40 +02:00
2008-03-03 11:22:25 +02:00
2008-02-07 09:49:38 +00:00
2008-02-24 00:27:33 -05:00
2008-02-13 16:21:18 -08:00
2008-02-26 14:03:47 +09:00
2008-03-04 16:35:14 -08:00
2008-03-04 16:35:15 -08:00
2008-03-19 18:53:37 -07:00
2008-03-04 16:35:12 -08:00
2008-03-12 12:34:37 -07:00
2008-02-14 20:58:04 -08:00
2008-02-13 16:21:19 -08:00
2008-02-13 16:21:18 -08:00
2008-02-08 09:22:31 -08:00
2008-02-14 21:13:33 -08:00
2008-02-08 09:22:41 -08:00
2008-02-15 07:33:07 -08:00
2008-02-27 12:21:18 -08:00
2008-03-04 12:28:49 -08:00
2008-03-07 14:35:37 -05:00
2008-02-21 16:40:15 -08:00
2008-02-13 16:21:18 -08:00
2008-02-14 21:13:33 -08:00
2008-03-10 18:01:19 -07:00
2008-03-17 08:26:44 -04:00
2008-02-07 23:11:56 -08:00
2008-02-08 09:22:23 -08:00
2008-02-13 16:21:18 -08:00
2008-02-23 10:40:04 -08:00
2008-03-13 10:09:27 +11:00
2008-02-08 09:22:31 -08:00
2008-03-07 11:08:40 -08:00
2008-02-08 09:22:26 -08:00
2008-02-07 08:42:28 -08:00
2008-02-29 18:46:50 +01:00
2008-03-19 18:53:36 -07:00
2008-02-08 09:22:41 -08:00
2008-02-07 08:42:18 -08:00
2008-02-07 08:42:19 -08:00
2008-02-13 16:21:18 -08:00
2008-03-19 04:27:53 +01:00
2008-03-20 09:46:36 -07:00
2008-02-14 21:17:08 -08:00
2008-02-07 08:42:34 -08:00
2008-02-13 16:21:18 -08:00
2008-02-26 14:52:45 +09:00
2008-02-07 08:42:30 -08:00
2008-02-08 09:22:41 -08:00
2008-02-08 09:22:27 -08:00
2008-02-18 20:52:13 -08:00
2008-03-06 16:21:49 -08:00
2008-03-03 12:22:32 -08:00
2008-03-04 16:35:13 -08:00
2008-03-04 16:35:13 -08:00
2008-02-08 09:22:31 -08:00
2008-02-07 08:42:34 -08:00
2008-02-13 16:21:18 -08:00
2008-02-09 11:08:33 -08:00
2008-02-09 04:01:48 -05:00
2008-03-10 18:01:18 -07:00
2008-03-09 08:42:57 +01:00
2008-02-08 09:22:37 -08:00
2008-03-09 08:42:57 +01:00
2008-03-19 04:27:53 +01:00
2008-02-07 08:42:16 -08:00
2008-02-08 09:22:39 -08:00
2008-02-08 09:22:34 -08:00
2008-02-08 09:22:36 -08:00
2008-03-04 14:57:43 -08:00
2008-02-08 09:22:23 -08:00
2008-02-18 12:18:05 -03:00
2008-02-18 12:18:05 -03:00
2008-03-17 22:58:21 +11:00
2008-02-29 08:36:13 -08:00
2008-02-13 16:21:18 -08:00
2008-02-13 16:21:18 -08:00
aedb60a67c