Re: PROBLEM: A Capability LSM Module serious bug

From: Serge E. Hallyn (hallyn@private)
Date: Mon Dec 08 2003 - 09:48:21 PST

  • Next message: Valdis.Kletnieks@private: "Re: PROBLEM: A Capability LSM Module serious bug" 

    In the following:

+       task->keep_capabilities = 0;
+
+       if ((task->uid && task->euid && task->suid) && !task->keep_capabilities)
+               cap_clear (task->cap_permitted);
+       else
+               task->cap_permitted = CAP_INIT_EFF_SET;

The check for (!task_keep_capabilities) can be safely removed, right?

-serge

    This archive was generated by hypermail 2b30 : Mon Dec 08 2003 - 09:49:51 PST