Revision bf35a7879f1dfb0d050fe779168bcf25c7de66f5 authored by Tejun Heo on 06 January 2022, 21:02:29 UTC, committed by Tejun Heo on 06 January 2022, 21:02:29 UTC
When a task is writing to an fd opened by a different task, the perm check should use the cgroup namespace of the latter task. Add a test for it. Tested-by: Michal Koutný <mkoutny@suse.com> Signed-off-by: Tejun Heo <tj@kernel.org>
1 parent 613e040
File | Mode | Size |
---|---|---|
apparmor | ||
bpf | ||
integrity | ||
keys | ||
landlock | ||
loadpin | ||
lockdown | ||
safesetid | ||
selinux | ||
smack | ||
tomoyo | ||
yama | ||
Kconfig | -rw-r--r-- | 10.3 KB |
Kconfig.hardening | -rw-r--r-- | 10.8 KB |
Makefile | -rw-r--r-- | 892 bytes |
commoncap.c | -rw-r--r-- | 42.8 KB |
device_cgroup.c | -rw-r--r-- | 21.1 KB |
inode.c | -rw-r--r-- | 10.6 KB |
lsm_audit.c | -rw-r--r-- | 10.9 KB |
min_addr.c | -rw-r--r-- | 1.3 KB |
security.c | -rw-r--r-- | 66.0 KB |
![swh spinner](/static/img/swh-spinner.gif)
Computing file changes ...