| commit | 71a98971b932174e121bc19056475c601598132f | [log] [tgz] |
|---|---|---|
| author | Jann Horn <jannh@google.com> | Wed Apr 10 09:55:58 2019 -0700 |
| committer | Micah Morton <mortonm@chromium.org> | Mon Jul 15 08:07:19 2019 -0700 |
| tree | fb3a1ee4a8b7cdec81b2f0671524a25af4b5b016 | |
| parent | 78ae7df96d647627ceae0b65eea9e4f83a0a4b66 [diff] |
LSM: SafeSetID: fix userns handling in securityfs Looking at current_cred() in write handlers is bad form, stop doing that. Also, let's just require that the write is coming from the initial user namespace. Especially SAFESETID_WHITELIST_FLUSH requires privilege over all namespaces, and SAFESETID_WHITELIST_ADD should probably require it as well. Signed-off-by: Jann Horn <jannh@google.com> Signed-off-by: Micah Morton <mortonm@chromium.org>