mirror of https://gitee.com/openkylin/linux.git
d4eb82c783
PTRACE_TRACEME doesn't have proper capabilities validation when parent is less privileged than child. Issue pointed out by Ram Gupta <ram.gupta5@gmail.com>. Note: I haven't identified a strong security issue, and it's a small ABI change that could break apps that rely on existing behaviour (which allows parent that is less privileged than child to ptrace when child does PTRACE_TRACEME). Signed-off-by: Chris Wright <chrisw@sous-sol.org> Cc: Ram Gupta <ram.gupta5@gmail.com> Signed-off-by: Andrew Morton <akpm@osdl.org> Signed-off-by: Linus Torvalds <torvalds@osdl.org> |
||
---|---|---|
.. | ||
keys | ||
selinux | ||
Kconfig | ||
Makefile | ||
capability.c | ||
commoncap.c | ||
dummy.c | ||
inode.c | ||
root_plug.c | ||
seclvl.c | ||
security.c |