 James Morris
|
12a5a2621b
Merge branch 'master' into next
|
vor 14 Jahren |
 Serge E. Hallyn
|
47a150edc2
Cache user_ns in struct cred
|
vor 14 Jahren |
 Eric Paris
|
5163b583a0
capabilities: delete unused cap_set_full
|
vor 14 Jahren |
|
Eric Paris
|
ffa8e59df0
capabilities: do not drop CAP_SETPCAP from the initial task
|
vor 14 Jahren |
|
Serge E. Hallyn
|
3263245de4
userns: make has_capability* into real functions
|
vor 14 Jahren |
 Serge E. Hallyn
|
3486740a4f
userns: security: make capabilities relative to the user namespace
|
vor 14 Jahren |
 Chris Wright
|
6037b715d6
security: add cred argument to security_capable()
|
vor 14 Jahren |
 Li Zefan
|
32bd7eb5a7
sched: Remove remaining USER_SCHED code
|
vor 15 Jahren |
 Thomas Gleixner
|
86fc80f16e
capabilities: Use RCU to protect task lookup in sys_capget
|
vor 15 Jahren |
 Serge E. Hallyn
|
b3a222e52e
remove CONFIG_SECURITY_FILE_CAPABILITIES compile option
|
vor 15 Jahren |
 Andrew G. Morgan
|
c4a5af54c8
Silence the existing API for capability version compatibility check.
|
vor 15 Jahren |
 Arjan van de Ven
|
825332e4ff
capabilities: simplify bound checks for copy_from_user()
|
vor 15 Jahren |
 Heiko Carstens
|
b290ebe2c4
[CVE-2009-0029] System call wrappers part 04
|
vor 16 Jahren |
|
James Morris
|
ac8cc0fa53
Merge branch 'next' into for-linus
|
vor 16 Jahren |
 David Howells
|
3699c53c48
CRED: Fix regression in cap_capable() as shown up by sys_faccessat() [ver #3]
|
vor 16 Jahren |
|
James Morris
|
29881c4502
Revert "CRED: Fix regression in cap_capable() as shown up by sys_faccessat() [ver #2]"
|
vor 16 Jahren |
|
David Howells
|
14eaddc967
CRED: Fix regression in cap_capable() as shown up by sys_faccessat() [ver #2]
|
vor 16 Jahren |
 Al Viro
|
57f71a0af4
sanitize audit_log_capset()
|
vor 16 Jahren |
|
David Howells
|
d84f4f992c
CRED: Inaugurate COW credentials
|
vor 16 Jahren |
|
David Howells
|
b6dff3ec5e
CRED: Separate task security context from task_struct
|
vor 16 Jahren |
|
David Howells
|
1cdcbec1a3
CRED: Neuter sys_capset()
|
vor 16 Jahren |
|
Eric Paris
|
637d32dc72
Capabilities: BUG when an invalid capability is requested
|
vor 16 Jahren |
|
Eric Paris
|
e68b75a027
When the capset syscall is used it is not possible for audit to record the
|
vor 16 Jahren |
|
Serge E. Hallyn
|
1f29fae297
file capabilities: add no_file_caps switch (v4)
|
vor 16 Jahren |
|
David Howells
|
5cd9c58fbe
security: Fix setting of PF_SUPERPRIV by __capable()
|
vor 17 Jahren |
|
Andrew G. Morgan
|
ab763c7112
security: filesystem capabilities refactor kernel code
|
vor 17 Jahren |
|
Andrew G. Morgan
|
086f7316f0
security: filesystem capabilities: fix fragile setuid fixup code
|
vor 17 Jahren |
|
Andrew G. Morgan
|
ca05a99a54
capabilities: remain source compatible with 32-bit raw legacy capability support.
|
vor 17 Jahren |
|
Andrew Morgan
|
e338d263a7
Add 64-bit capability support to the kernel
|
vor 17 Jahren |
 Pavel Emelyanov
|
8990571eb5
Uninline find_pid etc set of functions
|
vor 17 Jahren |
