diff options
| author | Kees Cook <keescook@chromium.org> | 2014-05-22 02:23:46 +0400 |
|---|---|---|
| committer | Kees Cook <keescook@chromium.org> | 2014-07-18 23:13:38 +0400 |
| commit | 1d4457f99928a968767f6405b4a1f50845aa15fd (patch) | |
| tree | 522641b08f4a465035910a74a3871ad38e62df01 /kernel/seccomp.c | |
| parent | 8855d608c145c1ca0e26f4da00741080bb49d80d (diff) | |
| download | linux-1d4457f99928a968767f6405b4a1f50845aa15fd.tar.xz | |
sched: move no_new_privs into new atomic flags
Since seccomp transitions between threads requires updates to the
no_new_privs flag to be atomic, the flag must be part of an atomic flag
set. This moves the nnp flag into a separate task field, and introduces
accessors.
Signed-off-by: Kees Cook <keescook@chromium.org>
Reviewed-by: Oleg Nesterov <oleg@redhat.com>
Reviewed-by: Andy Lutomirski <luto@amacapital.net>
Diffstat (limited to 'kernel/seccomp.c')
| -rw-r--r-- | kernel/seccomp.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/kernel/seccomp.c b/kernel/seccomp.c index f0652578af75..d2596136b0d1 100644 --- a/kernel/seccomp.c +++ b/kernel/seccomp.c @@ -241,7 +241,7 @@ static long seccomp_attach_filter(struct sock_fprog *fprog) * This avoids scenarios where unprivileged tasks can affect the * behavior of privileged children. */ - if (!current->no_new_privs && + if (!task_no_new_privs(current) && security_capable_noaudit(current_cred(), current_user_ns(), CAP_SYS_ADMIN) != 0) return -EACCES; |