Re: [RFC][PATCH v3] Unprivileged: Disable raising of privileges
From: Alan Cox <hidden>
Date: 2009-12-30 21:29:15
Also in:
lkml
Possibly related (same subject, not in this thread)
- 2010-01-03 · Re: [RFC][PATCH v3] Unprivileged: Disable raising of privileges · Peter Dolding <hidden>
- 2010-01-02 · Re: [RFC][PATCH v3] Unprivileged: Disable raising of privileges · Peter Dolding <hidden>
- 2010-01-01 · Re: [RFC][PATCH v3] Unprivileged: Disable raising of privileges · Casey Schaufler <casey@schaufler-ca.com>
- 2010-01-01 · Re: [RFC][PATCH v3] Unprivileged: Disable raising of privileges · Alan Cox <hidden>
- 2010-01-01 · Re: [RFC][PATCH v3] Unprivileged: Disable raising of privileges · Casey Schaufler <casey@schaufler-ca.com>
Added bprm->nosuid to make remove the need to add duplicate error prone checks. This ensures that the disabling of suid executables is exactly the same as MNT_NOSUID.
Another fine example of why we have security hooks so that we don't get a kernel full of other "random security idea of the day" hacks. Alan