Eric W. Biederman 70169420f5 exec: Don't reset euid and egid when the tracee has CAP_SETUID ... Don't reset euid and egid when the tracee has CAP_SETUID in it's user namespace. I punted on relaxing this permission check long ago but now that I have read this code closely it is clear it is safe to test against CAP_SETUID in the user namespace. Signed-off-by: "Eric W. Biederman" <ebiederm@xmission.com>		2017-01-24 12:03:07 +13:00
..
apparmor	apparmor: fix change_hat not finding hat after policy replacement	2016-11-21 18:01:28 +11:00
integrity	ima: platform-independent hash value	2016-12-20 09:48:46 -08:00
keys	Replace <asm/uaccess.h> with <linux/uaccess.h> globally	2016-12-24 11:46:01 -08:00
loadpin	LSM: LoadPin: provide enablement CONFIG	2016-05-17 20:10:30 +10:00
selinux	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security	2016-12-22 10:03:52 -08:00
smack	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2016-12-16 10:24:44 -08:00
tomoyo	mm: add locked parameter to get_user_pages_remote()	2016-12-14 16:04:08 -08:00
yama	Yama: allow access for the current ptrace parent	2016-12-05 11:48:01 +11:00
commoncap.c	exec: Don't reset euid and egid when the tracee has CAP_SETUID	2017-01-24 12:03:07 +13:00
device_cgroup.c	security/device_cgroup: Fix RCU_LOCKDEP_WARN() condition	2015-09-03 18:13:10 -07:00
inode.c	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2016-10-10 20:16:43 -07:00
Kconfig	- force check_object_size() to be inline too	2016-09-07 14:03:49 -07:00
lsm_audit.c	Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security	2016-10-04 14:48:27 -07:00
Makefile	LSM: LoadPin for kernel file loading restrictions	2016-04-21 10:47:27 +10:00
min_addr.c
security.c	security, overlayfs: Provide hook to correctly label newly created files	2016-08-08 20:46:46 -04:00