Re: PROBLEM: A Capability LSM Module serious bug

From: Serge E. Hallyn (hallyn@private)
Date: Mon Dec 08 2003 - 06:40:28 PST

Next message: Serge E. Hallyn: "Re: PROBLEM: A Capability LSM Module serious bug"

Previous message: liangbin01@private: "PROBLEM: A Capability LSM Module serious bug"
In reply to: liangbin01@private: "PROBLEM: A Capability LSM Module serious bug"
Next in thread: Serge E. Hallyn: "Re: PROBLEM: A Capability LSM Module serious bug"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

> Let's view the creds with a shell command.
> $cat /proc/pid of vim/status. 
> ...
> CapInh: 0000000000000000
> CapPrm: 00000000ffffffff
> CapEff: 00000000fffffeff 

This appears to be a result of proc caching information.

Placing a debug statement in commoncap.c:cap_capable, shows that
cap_effective is in fact 0000000000000000.

-serge

Next message: Serge E. Hallyn: "Re: PROBLEM: A Capability LSM Module serious bug"
Previous message: liangbin01@private: "PROBLEM: A Capability LSM Module serious bug"
In reply to: liangbin01@private: "PROBLEM: A Capability LSM Module serious bug"
Next in thread: Serge E. Hallyn: "Re: PROBLEM: A Capability LSM Module serious bug"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Mon Dec 08 2003 - 06:42:25 PST