Re: [PATCH] properly split capset_check+capset_set

From: Stephen Smalley
Date: Tue Jan 04 2005 - 17:14:24 EST


On Tue, 2005-01-04 at 11:27, Serge E. Hallyn wrote:
> The attached patch removes checks from kernel/capability.c which are
> redundant with cap_capset_check() code, and moves the capset_check()
> calls to immediately before the capset_set() calls. This allows
> capset_check() to accurately check the setter's permission to set caps
> on the target. Please apply.
>
> thanks,
> -serge
>
> Signed-off-by: Serge Hallyn <serue@xxxxxxxxxx>

Signed-off-by: Stephen Smalley <sds@xxxxxxxxxxxxxx>

--
Stephen Smalley <sds@xxxxxxxxxxxxxx>
National Security Agency

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/