Cyrill Gorcunov 79f0713d40 prctl: use CAP_SYS_RESOURCE for PR_SET_MM option ...

CAP_SYS_ADMIN is already overloaded left and right, so to have more
fine-grained access control use CAP_SYS_RESOURCE here.

The CAP_SYS_RESOUCE is chosen because this prctl option allows a current
process to adjust some fields of memory map descriptor which rather
represents what the process owns: pointers to code, data, stack
segments, command line, auxiliary vector data and etc.

Suggested-by: Michael Kerrisk <mtk.manpages@gmail.com>
Acked-by: Kees Cook <keescook@chromium.org>
Acked-by: Michael Kerrisk <mtk.manpages@gmail.com>
Cc: Pavel Emelyanov <xemul@parallels.com>
Cc: Tejun Heo <tj@kernel.org>
Cc: Oleg Nesterov <oleg@redhat.com>
Cc: Paul Bolle <pebolle@tiscali.nl>
Cc: KOSAKI Motohiro <kosaki.motohiro@jp.fujitsu.com>
Signed-off-by: Cyrill Gorcunov <gorcunov@openvz.org>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

2012-03-15 17:03:03 -07:00

..

debug

…

events

perf/hwbp: Fix a possible memory leak

2012-02-28 09:52:54 +01:00

gcov

…

irq

genirq: Clear action->thread_mask if IRQ_ONESHOT is not set

2012-03-06 16:46:39 -08:00

power

…

sched

Revert "CPU hotplug, cpusets, suspend: Don't touch cpusets during suspend/resume"

2012-03-07 08:21:19 -08:00

time

…

trace

…

.gitignore

…

acct.c

…

async.c

…

audit_tree.c

…

audit_watch.c

…

audit.c

…

audit.h

…

auditfilter.c

…

auditsc.c

…

backtracetest.c

…

bounds.c

…

capability.c

…

cgroup_freezer.c

…

cgroup.c

…

compat.c

…

configs.c

…

cpu_pm.c

…

cpu.c

…

cpuset.c

…

crash_dump.c

…

cred.c

…

delayacct.c

…

dma.c

…

elfcore.c

…

exec_domain.c

…

exit.c

…

extable.c

…

fork.c

vfork: kill PF_STARTING

2012-03-05 15:49:42 -08:00

freezer.c

…

futex_compat.c

…

futex.c

…

groups.c

…

hrtimer.c

…

hung_task.c

hung_task: fix the broken rcu_lock_break() logic

2012-03-05 15:49:42 -08:00

irq_work.c

…

itimer.c

…

jump_label.c

…

kallsyms.c

…

Kconfig.freezer

…

Kconfig.hz

…

Kconfig.locks

…

Kconfig.preempt

…

kexec.c

…

kfifo.c

…

kmod.c

…

kprobes.c

kprobes: return proper error code from register_kprobe()

2012-03-05 15:49:42 -08:00

ksysfs.c

…

kthread.c

…

latencytop.c

…

lockdep_internals.h

…

lockdep_proc.c

…

lockdep_states.h

…

lockdep.c

…

Makefile

…

module.c

…

mutex-debug.c

…

mutex-debug.h

…

mutex.c

…

mutex.h

…

notifier.c

…

nsproxy.c

…

padata.c

…

panic.c

…

params.c

module: make module param bint handle nul value

2012-02-14 11:02:15 +10:30

pid_namespace.c

…

pid.c

vfs: fix panic in __d_lookup() with high dentry hashtable counts

2012-02-13 20:45:38 -05:00

posix-cpu-timers.c

…

posix-timers.c

…

printk.c

kmsg_dump: don't run on non-error paths by default

2012-03-05 15:49:42 -08:00

profile.c

…

ptrace.c

…

range.c

…

rcu.h

…

rcupdate.c

…

rcutiny_plugin.h

…

rcutiny.c

…

rcutorture.c

…

rcutree_plugin.h

…

rcutree_trace.c

…

rcutree.c

…

rcutree.h

…

relay.c

…

res_counter.c

…

resource.c

…

rtmutex_common.h

…

rtmutex-debug.c

…

rtmutex-debug.h

…

rtmutex-tester.c

…

rtmutex.c

…

rtmutex.h

…

rwsem.c

…

seccomp.c

…

semaphore.c

…

signal.c

…

smp.c

…

softirq.c

…

spinlock.c

…

srcu.c

…

stacktrace.c

…

stop_machine.c

…

sys_ni.c

…

sys.c

prctl: use CAP_SYS_RESOURCE for PR_SET_MM option

2012-03-15 17:03:03 -07:00

sysctl_binary.c

…

sysctl_check.c

…

sysctl.c

…

taskstats.c

…

test_kprobes.c

…

time.c

…

timeconst.pl

…

timer.c

…

tracepoint.c

…

tsacct.c

…

uid16.c

…

up.c

…

user_namespace.c

…

user-return-notifier.c

…

user.c

…

utsname_sysctl.c

…

utsname.c

…

wait.c

…

watchdog.c

…

workqueue_sched.h

…

workqueue.c

Block: use a freezable workqueue for disk-event polling

2012-03-02 10:51:00 +01:00