Re: Q: selinux_bprm_committed_creds() && signals/do_wait

[Roland McGrath]

> I believe it's something to do with the binfmt driver needing to access files
> in the old security context between calling flush_old_exec() and calling
> install_exec_creds() [compute_creds() as was].  It can't do some of the
> accesses before calling flush_old_exec() because it has to do funky things
> with mmap().

This doesn't make too much sense to me off hand.  These accesses must
already be specially magical for unreadable setuid (--s) files to work.


Thanks,
Roland
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/