projects / linux.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 76c9805) | patch
Smack: ptrace capability use fixes
authorCasey Schaufler <casey.schaufler@intel.com>
Tue, 18 Sep 2018 23:09:16 +0000 (16:09 -0700)
committerCasey Schaufler <casey.schaufler@intel.com>
Tue, 18 Sep 2018 23:09:16 +0000 (16:09 -0700)
commitdcb569cf6ac99ca899b8109c128b6ae52477a015
treeb14cf0aa118950016081ceed940f55269dc400dbtree
parent76c9805b28557d0b6d439359350061ed0a9395e3commit | diff
Smack: ptrace capability use fixes

This fixes a pair of problems in the Smack ptrace checks
related to checking capabilities. In both cases, as reported
by Lukasz Pawelczyk, the raw capability calls are used rather
than the Smack wrapper that check addition restrictions.
In one case, as reported by Jann Horn, the wrong task is being
checked for capabilities.

Signed-off-by: Casey Schaufler <casey@schaufler-ca.com>
security/smack/smack_lsm.c diff | blob | history