Re: Mediating send_sigurg

From: Chris Wright (chrisw@private)
Date: Fri Aug 27 2004 - 13:03:09 PDT


* Stephen Smalley (sds@private) wrote:
> On Fri, 2004-08-27 at 15:49, Chris Wright wrote:
> > send_sigurg() will call check_kill_permission() which checks
> > security_task_kill(), does this confuse the result at all?
> 
> That's done with info == 1 (SEND_SIG_PRIV), so it skips checking at that
> point, right?  Otherwise, it would end up checking based on current
> rather than the fown's credentials, which would be wrong.

That's exactly what I meant by confuse (random process context).  I must
have misread, as I saw the check (SEND_SIG_PRIV included) calling the
security_task_kill() hook.

thanks,
-chris
-- 
Linux Security Modules     http://lsm.immunix.org     http://lsm.bkbits.net



This archive was generated by hypermail 2.1.3 : Fri Aug 27 2004 - 13:03:25 PDT