Micah Morton 40852275a9 LSM: add SafeSetID module that gates setid calls
This change ensures that the set*uid family of syscalls in kernel/sys.c
(setreuid, setuid, setresuid, setfsuid) all call ns_capable_common with
the CAP_OPT_INSETID flag, so capability checks in the security_capable
hook can know whether they are being called from within a set*uid
syscall. This change is a no-op by itself, but is needed for the
proposed SafeSetID LSM.

Signed-off-by: Micah Morton <mortonm@chromium.org>
Acked-by: Kees Cook <keescook@chromium.org>
Signed-off-by: James Morris <james.morris@microsoft.com>
2019-01-25 11:22:43 -08:00
..
2018-12-28 12:45:04 -08:00
2018-11-26 18:41:21 -05:00
2018-11-26 18:41:21 -05:00
2018-11-28 11:57:07 +01:00
2018-12-28 12:42:30 -08:00
2018-10-31 08:54:16 -07:00
2019-01-22 14:33:10 -08:00
2019-01-11 18:05:40 -08:00