Messages in this thread | | | From | Kees Cook <> | Subject | Re: [PATCH v1 0/2] Fix misuse of security_capable() | Date | Tue, 17 Nov 2020 13:08:45 -0800 |
| |
On Fri, 30 Oct 2020 13:38:47 +0100, Mickaël Salaün wrote: > This series replaces all the use of security_capable(current_cred(), > ...) with ns_capable{,_noaudit}() which set PF_SUPERPRIV. > > This initially come from a review of Landlock by Jann Horn: > https://lore.kernel.org/lkml/CAG48ez1FQVkt78129WozBwFbVhAPyAr9oJAHFHAbbNxEBr9h1g@mail.gmail.com/ > > Mickaël Salaün (2): > ptrace: Set PF_SUPERPRIV when checking capability > seccomp: Set PF_SUPERPRIV when checking capability > > [...]
Applied to for-linus/seccomp, thanks!
[1/2] ptrace: Set PF_SUPERPRIV when checking capability https://git.kernel.org/kees/c/cf23705244c9 [2/2] seccomp: Set PF_SUPERPRIV when checking capability https://git.kernel.org/kees/c/fb14528e4436
-- Kees Cook
| |