diff options
author | Serge E. Hallyn <serue@us.ibm.com> | 2008-02-23 15:23:33 -0800 |
---|---|---|
committer | Linus Torvalds <torvalds@woody.linux-foundation.org> | 2008-02-23 17:12:13 -0800 |
commit | 094972840f2e7c1c6fc9e1a97d817cc17085378e (patch) | |
tree | 1fa2b8fb54b5d5d60318c8659d4574a81b953f88 /security | |
parent | e5df70ab194543522397fa3da8c8f80564a0f7d3 (diff) | |
download | kernel-common-094972840f2e7c1c6fc9e1a97d817cc17085378e.tar.gz kernel-common-094972840f2e7c1c6fc9e1a97d817cc17085378e.tar.bz2 kernel-common-094972840f2e7c1c6fc9e1a97d817cc17085378e.zip |
file capabilities: simplify signal check
Simplify the uid equivalence check in cap_task_kill(). Anyone can kill a
process owned by the same uid.
Without this patch wireshark is reported to fail.
Signed-off-by: Serge E. Hallyn <serue@us.ibm.com>
Signed-off-by: Andrew G. Morgan <morgan@kernel.org>
Cc: <stable@kernel.org>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Diffstat (limited to 'security')
-rw-r--r-- | security/commoncap.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/security/commoncap.c b/security/commoncap.c index 5aba82679a0b..bb0c095f5761 100644 --- a/security/commoncap.c +++ b/security/commoncap.c @@ -552,7 +552,7 @@ int cap_task_kill(struct task_struct *p, struct siginfo *info, * allowed. * We must preserve legacy signal behavior in this case. */ - if (p->euid == 0 && p->uid == current->uid) + if (p->uid == current->uid) return 0; /* sigcont is permitted within same session */ |