Re: [PATCH PLACEHOLDER 1/3] fs/exec: "always_unprivileged" patch

[Eric W. Biederman]

Will Drewry <wad@xxxxxxxxxxxx> writes:

> One consideration could be to add do_exit()s at known DAC transitions
> (set*id, fcaps). I don't know if that'd be wise, but it would remove
> some described ambiguity.  The same could be done with exec when the
> (e)uid/gid/fcaps change.  However, none of that helps with the opaque
> LSM data, so that'd have to be left up to the LSMs and the LSM_* flag
> you've added.

I went through and audited userspace recently and I could not find
anything that did not handle setuid failing.  It looks like kernel
developers are not the only ones who learned from the
sendmail/capabilities problem.

Eric


--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/