]> Pileus Git - ~andy/linux/commit
projects / ~andy / linux / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 77b513d) | patch
Yama: replace capable() with ns_capable()
authorKees Cook <keescook@chromium.org>
Mon, 14 May 2012 17:19:28 +0000 (10:19 -0700)
committerJames Morris <james.l.morris@oracle.com>
Tue, 15 May 2012 00:27:57 +0000 (10:27 +1000)
commit2cc8a71641b4460783ea3bd7a3476043fdf85397
treefe8a39bbedc403306c3a0c2f773a4499d6ae99ectree | snapshot
parent77b513dda90fd99bd1225410b25e745b74779c1ccommit | diff
Yama: replace capable() with ns_capable()

When checking capabilities, the question we want to be asking is "does
current() have the capability in the child's namespace?"

Signed-off-by: Kees Cook <keescook@chromium.org>
Signed-off-by: James Morris <james.l.morris@oracle.com>
security/yama/yama_lsm.c diff | blob | history
Andy's Linux Kernel repo