John Stultz 4b2bd5fec0 proc: fix timerslack_ns CAP_SYS_NICE check when adjusting self ... In changing from checking ptrace_may_access(p, PTRACE_MODE_ATTACH_FSCREDS) to capable(CAP_SYS_NICE), I missed that ptrace_my_access succeeds when p == current, but the CAP_SYS_NICE doesn't. Thus while the previous commit was intended to loosen the needed privileges to modify a processes timerslack, it needlessly restricted a task modifying its own timerslack via the proc/<tid>/timerslack_ns (which is permitted also via the PR_SET_TIMERSLACK method). This patch corrects this by checking if p == current before checking the CAP_SYS_NICE value. This patch applies on top of my two previous patches currently in -mm Link: http://lkml.kernel.org/r/1471906870-28624-1-git-send-email-john.stultz@linaro.org Signed-off-by: John Stultz <john.stultz@linaro.org> Acked-by: Kees Cook <keescook@chromium.org> Cc: "Serge E. Hallyn" <serge@hallyn.com> Cc: Thomas Gleixner <tglx@linutronix.de> Cc: Arjan van de Ven <arjan@linux.intel.com> Cc: Oren Laadan <orenl@cellrox.com> Cc: Ruchi Kandoi <kandoiruchi@google.com> Cc: Rom Lemarchand <romlem@android.com> Cc: Todd Kjos <tkjos@google.com> Cc: Colin Cross <ccross@android.com> Cc: Nick Kralevich <nnk@google.com> Cc: Dmitry Shmidt <dimitrysh@google.com> Cc: Elliott Hughes <enh@google.com> Cc: Android Kernel Team <kernel-team@android.com> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>		2016-10-07 18:46:30 -07:00
..
array.c	seq/proc: modify seq_put_decimal_[u]ll to take a const char *, not char	2016-10-07 18:46:30 -07:00
base.c	proc: fix timerslack_ns CAP_SYS_NICE check when adjusting self	2016-10-07 18:46:30 -07:00
cmdline.c
consoles.c
cpuinfo.c
devices.c
fd.c	switch all procfs directories ->iterate_shared()	2016-05-02 19:49:30 -04:00
fd.h
generic.c	proc: make proc entries inherit ownership from parent	2016-08-14 21:07:20 -07:00
inode.c	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/user-namespace	2016-07-29 15:54:19 -07:00
internal.h	proc: Convert proc_mount to use mount_ns.	2016-06-23 15:41:54 -05:00
interrupts.c
Kconfig
kcore.c	fs/proc/kcore.c: Add bounce buffer for ktext data	2016-09-20 13:32:49 -07:00
kmsg.c
loadavg.c
Makefile	fs/proc: Add compiler check for -Wno-override-init to support gcc < 4.2	2016-08-03 12:45:23 -04:00
meminfo.c	meminfo: break apart a very long seq_printf with #ifdefs	2016-10-07 18:46:30 -07:00
namespaces.c	switch all procfs directories ->iterate_shared()	2016-05-02 19:49:30 -04:00
nommu.c
page.c	mm: rename _count, field of the struct page, to _refcount	2016-05-19 19:12:14 -07:00
proc_net.c	proc: make proc entries inherit ownership from parent	2016-08-14 21:07:20 -07:00
proc_sysctl.c	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/user-namespace	2016-10-06 09:52:23 -07:00
proc_tty.c
root.c	proc: Convert proc_mount to use mount_ns.	2016-06-23 15:41:54 -05:00
self.c	wrappers for ->i_mutex access	2016-01-22 18:04:28 -05:00
softirqs.c
stat.c	seq/proc: modify seq_put_decimal_[u]ll to take a const char *, not char	2016-10-07 18:46:30 -07:00
task_mmu.c	fs/proc/task_mmu.c: make the task_mmu walk_page_range() limit in clear_refs_write() obvious	2016-10-07 18:46:28 -07:00
task_nommu.c	proc: revert /proc/<pid>/maps [stack:TID] annotation	2016-02-03 08:28:43 -08:00
thread_self.c	wrappers for ->i_mutex access	2016-01-22 18:04:28 -05:00
uptime.c
version.c
vmcore.c	crash_dump: Add vmcore_elf32_check_arch	2016-05-13 14:01:59 +02:00