LKML Archive on lore.kernel.org
help / color / mirror / Atom feed
* root_plug: use cap_task_prctl
@ 2008-03-10 20:57 Serge E. Hallyn
  2008-03-10 21:14 ` Greg KH
  0 siblings, 1 reply; 2+ messages in thread
From: Serge E. Hallyn @ 2008-03-10 20:57 UTC (permalink / raw)
  To: lkml, Greg KH, Andrew Morgan

With the introduction of per-process securebits, the capabilities-related
prctl callbacks were moved into cap_task_prctl().  Have root_plug use
cap_task_prctl() so that PR_SET_KEEPCAPS is defined.

(Andrew, I didn't put patch numbers here, but there are only two of
these.  These are the LSMs which internalize capabilities.  The dummy
module will continue to not support PR_SET_KEEPCAPS).

Signed-off-by: Serge E. Hallyn <serue@us.ibm.com>
---
 security/root_plug.c |    1 +
 1 files changed, 1 insertions(+), 0 deletions(-)

diff --git a/security/root_plug.c b/security/root_plug.c
index 870f130..20d1c9c 100644
--- a/security/root_plug.c
+++ b/security/root_plug.c
@@ -86,6 +86,7 @@ static struct security_operations rootplug_security_ops = {
 
 	.task_post_setuid =		cap_task_post_setuid,
 	.task_reparent_to_init =	cap_task_reparent_to_init,
+	.task_prctl =			cap_task_prctl,
 
 	.bprm_check_security =		rootplug_bprm_check_security,
 };
-- 
1.5.1


^ permalink raw reply	[flat|nested] 2+ messages in thread

* Re: root_plug: use cap_task_prctl
  2008-03-10 20:57 root_plug: use cap_task_prctl Serge E. Hallyn
@ 2008-03-10 21:14 ` Greg KH
  0 siblings, 0 replies; 2+ messages in thread
From: Greg KH @ 2008-03-10 21:14 UTC (permalink / raw)
  To: Serge E. Hallyn; +Cc: lkml, Andrew Morgan

On Mon, Mar 10, 2008 at 03:57:20PM -0500, Serge E. Hallyn wrote:
> With the introduction of per-process securebits, the capabilities-related
> prctl callbacks were moved into cap_task_prctl().  Have root_plug use
> cap_task_prctl() so that PR_SET_KEEPCAPS is defined.
> 
> (Andrew, I didn't put patch numbers here, but there are only two of
> these.  These are the LSMs which internalize capabilities.  The dummy
> module will continue to not support PR_SET_KEEPCAPS).
> 
> Signed-off-by: Serge E. Hallyn <serue@us.ibm.com>

Acked-by: Greg Kroah-Hartman <gregkh@suse.de>


^ permalink raw reply	[flat|nested] 2+ messages in thread

end of thread, other threads:[~2008-03-10 21:15 UTC | newest]

Thread overview: 2+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2008-03-10 20:57 root_plug: use cap_task_prctl Serge E. Hallyn
2008-03-10 21:14 ` Greg KH

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).