 Serge Hallyn
|
f54fb863c6
capabilities: allow nice if we are privileged
|
vor 12 Jahren |
 Eric W. Biederman
|
160da84dbb
userns: Allow PR_CAPBSET_DROP in a user namespace.
|
vor 12 Jahren |
 Al Viro
|
182be68478
kill f_vfsmnt
|
vor 12 Jahren |
|
Eric W. Biederman
|
520d9eabce
Fix cap_capable to only allow owners in the parent user namespace to have caps.
|
vor 12 Jahren |
|
Al Viro
|
e5467859f7
split ->file_mmap() into ->mmap_addr()/->mmap_file()
|
vor 13 Jahren |
|
Al Viro
|
d007794a18
split cap_mmap_addr() out of cap_file_mmap()
|
vor 13 Jahren |
 Linus Torvalds
|
644473e9c6
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/user-namespace
|
vor 13 Jahren |
 James Morris
|
898bfc1d46
Merge tag 'v3.4-rc5' into next
|
vor 13 Jahren |
|
Eric W. Biederman
|
18815a1808
userns: Convert capabilities related permsion checks
|
vor 13 Jahren |
|
Eric W. Biederman
|
078de5f706
userns: Store uid and gid values in struct cred with kuid_t and kgid_t types
|
vor 13 Jahren |
|
Eric W. Biederman
|
783291e690
userns: Simplify the user_namespace by making userns->creator a kuid.
|
vor 13 Jahren |
 Jonghwan Choi
|
51b79bee62
security: fix compile error in commoncap.c
|
vor 13 Jahren |
 Eric Paris
|
d52fc5dde1
fcaps: clear the same personality flags as suid when fcaps are used
|
vor 13 Jahren |
 Andy Lutomirski
|
259e5e6c75
Add PR_{GET,SET}_NO_NEW_PRIVS to prevent execve from granting privs
|
vor 13 Jahren |
|
Eric W. Biederman
|
aeb3ae9da9
userns: Add an explicit reference to the parent user namespace
|
vor 13 Jahren |
|
Eric W. Biederman
|
c4a4d60379
userns: Use cred->user_ns instead of cred->user->user_ns
|
vor 13 Jahren |
 Al Viro
|
4040153087
security: trim security.h
|
vor 13 Jahren |
|
Linus Torvalds
|
c49c41a413
Merge branch 'for-linus' of git://selinuxproject.org/~jmorris/linux-security
|
vor 13 Jahren |
|
Eric Paris
|
fd77846152
security: remove the security_netlink_recv hook as it is equivalent to capable()
|
vor 13 Jahren |
|
Eric Paris
|
6a9de49115
capabilities: remove the task from capable LSM hook entirely
|
vor 13 Jahren |
 Serge Hallyn
|
7d8db1808a
capabilities: initialize has_cap
|
vor 14 Jahren |
 Zhi Li
|
4d49f6710b
capabilities: do not grant full privs for setuid w/ file caps + no effective caps
|
vor 14 Jahren |
|
Eric Paris
|
4bf2ea77db
capabilities: do not special case exec of init
|
vor 14 Jahren |
 Serge E. Hallyn
|
8409cca705
userns: allow ptrace from non-init user namespaces
|
vor 14 Jahren |
|
Serge E. Hallyn
|
3486740a4f
userns: security: make capabilities relative to the user namespace
|
vor 14 Jahren |
|
Linus Torvalds
|
7a6362800c
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next-2.6
|
vor 14 Jahren |
 Patrick McHardy
|
01a16b21d6
netlink: kill eff_cap from struct netlink_skb_parms
|
vor 14 Jahren |
 Richard Cochran
|
1e6d767924
time: Correct the *settime* parameters
|
vor 14 Jahren |
|
Eric Paris
|
12b3052c3e
capabilities/syslog: open code cap_syslog logic to fix build failure
|
vor 14 Jahren |
 Dan Rosenberg
|
eaf06b241b
Restrict unprivileged access to kernel syslog
|
vor 15 Jahren |
