Chris Wright d4eb82c783 [PATCH] make cap_ptrace enforce PTRACE_TRACME checks ...

PTRACE_TRACEME doesn't have proper capabilities validation when parent is
less privileged than child.  Issue pointed out by Ram Gupta
<[email protected]>.

Note: I haven't identified a strong security issue, and it's a small ABI
change that could break apps that rely on existing behaviour (which allows
parent that is less privileged than child to ptrace when child does
PTRACE_TRACEME).

Signed-off-by: Chris Wright <[email protected]>
Cc: Ram Gupta <[email protected]>
Signed-off-by: Andrew Morton <[email protected]>
Signed-off-by: Linus Torvalds <[email protected]>

2006-03-25 08:22:56 -08:00

..

keys

[PATCH] Keys: Replace duplicate non-updateable keys rather than failing

2006-03-25 08:22:50 -08:00

selinux

[PATCH] SELinux: add slab cache for inode security struct

2006-03-22 07:54:07 -08:00

capability.c

kbuild: un-stringnify KBUILD_MODNAME

2006-01-06 21:17:50 +01:00

commoncap.c

[PATCH] make cap_ptrace enforce PTRACE_TRACME checks

2006-03-25 08:22:56 -08:00

dummy.c

[SECURITY] getpeersec: Fix build breakage

2006-03-20 22:47:37 -08:00

inode.c

[PATCH] mutex subsystem, semaphore to mutex: VFS, ->i_sem

2006-01-09 15:59:24 -08:00

Kconfig

[LSM-IPSec]: Security association restriction.

2006-01-03 13:10:24 -08:00

Makefile

[PATCH] add securityfs for all LSMs to use

2005-07-08 18:48:41 -07:00

root_plug.c

Linux-2.6.12-rc2

2005-04-16 15:20:36 -07:00

seclvl.c

[PATCH] Bug fixes and cleanup for the BSD Secure Levels LSM

2006-03-23 07:38:03 -08:00

security.c

[PATCH] refactor capable() to one implementation, add __capable() helper

2006-03-25 08:22:56 -08:00