summaryrefslogtreecommitdiff
path: root/security
diff options
context:
space:
mode:
authorSerge E. Hallyn <serue@us.ibm.com>2008-02-23 15:23:33 -0800
committerLinus Torvalds <torvalds@woody.linux-foundation.org>2008-02-23 17:12:13 -0800
commit094972840f2e7c1c6fc9e1a97d817cc17085378e (patch)
tree1fa2b8fb54b5d5d60318c8659d4574a81b953f88 /security
parente5df70ab194543522397fa3da8c8f80564a0f7d3 (diff)
downloadkernel-common-094972840f2e7c1c6fc9e1a97d817cc17085378e.tar.gz
kernel-common-094972840f2e7c1c6fc9e1a97d817cc17085378e.tar.bz2
kernel-common-094972840f2e7c1c6fc9e1a97d817cc17085378e.zip
file capabilities: simplify signal check
Simplify the uid equivalence check in cap_task_kill(). Anyone can kill a process owned by the same uid. Without this patch wireshark is reported to fail. Signed-off-by: Serge E. Hallyn <serue@us.ibm.com> Signed-off-by: Andrew G. Morgan <morgan@kernel.org> Cc: <stable@kernel.org> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Diffstat (limited to 'security')
-rw-r--r--security/commoncap.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/security/commoncap.c b/security/commoncap.c
index 5aba82679a0b..bb0c095f5761 100644
--- a/security/commoncap.c
+++ b/security/commoncap.c
@@ -552,7 +552,7 @@ int cap_task_kill(struct task_struct *p, struct siginfo *info,
* allowed.
* We must preserve legacy signal behavior in this case.
*/
- if (p->euid == 0 && p->uid == current->uid)
+ if (p->uid == current->uid)
return 0;
/* sigcont is permitted within same session */