Re: [PATCH] prctl: Use CAP_SYS_RESOUCE for PR_SET_MM option

From: Paul Bolle
Date: Wed Mar 07 2012 - 15:35:43 EST


On Wed, 2012-03-07 at 16:52 +0400, Cyrill Gorcunov wrote:
> CAP_SYS_ADMIN is already overloaded left and right,
> so to have more finegrained access control use
> CAP_SYS_RESOUCE here.
>
> The CAP_SYS_RESOUCE is chosen because this prctl
> option allows a current process to adjust some
> fields of memory map descriptor which rather
> represent what the process owns: pointers to
> code, data, stack segments, command line,
> auxilary vector data and etc.

Nitpicking: s/CAP_SYS_RESOUCE/CAP_SYS_RESOURCE/ in both the commit
summary and the commit explanation. (And if you change that you might
also do a s/auxilary/auxiliary/ in the commit explanation.)


Paul Bolle

--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/