Revision 103502a35cfce0710909da874f092cb44823ca03 authored by Jann Horn on 26 December 2015, 05:00:48 UTC, committed by Kees Cook on 27 January 2016, 15:38:25 UTC
Before this patch, a process with some permissive seccomp filter that was applied by root without NO_NEW_PRIVS was able to add more filters to itself without setting NO_NEW_PRIVS by setting the new filter from a throwaway thread with NO_NEW_PRIVS. Signed-off-by: Jann Horn <jann@thejh.net> Cc: stable@vger.kernel.org Signed-off-by: Kees Cook <keescook@chromium.org>
1 parent 607259e
| File | Mode | Size |
|---|---|---|
| .gitignore | -rw-r--r-- | 44 bytes |
| Kconfig | -rw-r--r-- | 1.7 KB |
| Makefile | -rw-r--r-- | 3.6 KB |
| system_certificates.S | -rw-r--r-- | 535 bytes |
| system_keyring.c | -rw-r--r-- | 4.0 KB |
Computing file changes ...
