Andrew G. Morgan 5459c164f0
security: protect legacy applications from executing with insufficient privilege ...
When cap_bset suppresses some of the forced (fP) capabilities of a file,
it is generally only safe to execute the program if it understands how to
recognize it doesn't have enough privilege to work correctly. For legacy
applications (fE!=0), which have no non-destructive way to determine that
they are missing privilege, we fail to execute (EPERM) any executable that
requires fP capabilities, but would otherwise get pP' < fP. This is a
fail-safe permission check.
For some discussion of why it is problematic for (legacy) privileged
applications to run with less than the set of capabilities requested for
them, see:
http://userweb.kernel.org/~morgan/sendmail-capabilities-war-story.html
With this iteration of this support, we do not include setuid-0 based
privilege protection from the bounding set. That is, the admin can still
(ab)use the bounding set to suppress the privileges of a setuid-0 program.
[akpm@linux-foundation.org: coding-style fixes]
[akpm@linux-foundation.org: cleanup]
Signed-off-by: Andrew G. Morgan <morgan@kernel.org>
Acked-by: Serge Hallyn <serue@us.ibm.com>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
2008-07-24 10:47:22 -07:00
2008-07-14 22:38:35 +02:00
2008-07-15 16:11:29 -04:00
2008-07-23 18:24:08 -07:00
2008-07-14 23:48:48 -07:00
2008-07-16 15:17:52 -07:00
2008-07-21 21:55:03 -07:00
2008-07-21 10:11:00 -07:00
2008-07-21 17:05:25 +10:00
2008-07-22 13:13:47 -07:00
2008-07-14 14:52:56 -04:00
2008-07-20 21:21:46 -07:00
2008-07-22 13:03:22 -07:00
2008-07-16 17:25:46 -07:00
2008-07-01 11:28:06 +10:00
2008-07-17 17:59:55 -07:00
2008-07-22 09:59:40 -07:00
2008-07-24 10:47:22 -07:00
2008-07-03 13:21:14 +02:00
2008-07-16 14:51:41 -07:00
2008-07-03 13:21:12 +02:00
2008-07-24 10:47:20 -07:00
2008-07-04 10:40:08 -07:00
2008-07-04 10:40:05 -07:00
2008-07-17 15:21:29 -07:00
2008-07-23 19:36:53 -07:00
2008-07-18 13:22:25 +02:00
2008-07-12 08:22:32 -05:00
2008-07-10 20:35:18 +08:00
2008-07-20 17:12:38 -07:00
2008-07-22 17:30:57 -07:00
2008-07-11 10:46:50 +02:00
2008-07-13 11:51:40 +01:00
2008-07-05 13:10:50 -07:00
2008-07-21 21:54:59 -07:00
2008-07-21 12:00:37 +01:00
2008-07-21 21:54:53 -07:00
2008-07-21 12:00:37 +01:00
2008-07-22 10:39:36 +10:00
2008-07-17 17:59:56 -07:00
2008-07-08 11:59:42 -07:00
2008-07-21 21:54:53 -07:00
2008-07-01 14:47:09 +10:00
2008-07-02 03:47:41 -07:00
2008-07-08 17:55:41 +02:00
2008-07-10 14:30:13 +01:00
2008-07-16 23:27:03 +02:00
2008-07-22 19:09:51 -07:00
2008-07-24 10:47:15 -07:00
2008-07-16 17:57:47 -05:00
2008-07-11 15:49:21 +02:00
2008-07-20 17:12:36 -07:00
2008-07-03 13:21:14 +02:00
2008-07-24 10:47:20 -07:00
2008-07-20 17:12:36 -07:00
2008-07-04 08:47:41 -04:00
2008-07-23 15:25:21 +02:00
2008-07-24 10:47:19 -07:00
2008-07-14 22:38:31 +02:00
2008-07-20 07:18:38 -03:00
2008-07-14 22:38:36 +02:00
2008-07-23 19:56:01 +02:00
2008-07-08 14:15:59 -04:00
2008-07-18 18:05:19 -07:00
2008-07-14 22:18:19 -07:00
2008-07-14 22:49:06 -07:00
2008-07-03 17:51:57 +09:00
2008-07-10 14:47:38 +01:00
2008-06-27 20:09:00 -07:00
2008-07-09 12:09:28 -04:00
2008-07-16 18:02:33 -07:00
2008-07-21 00:55:14 -04:00
2008-07-15 10:39:22 -07:00
2008-07-03 13:21:14 +02:00
2008-07-16 23:27:07 +02:00
2008-07-21 13:41:16 -07:00
2008-07-20 17:12:37 -07:00
2008-07-11 19:27:31 -04:00
2008-06-27 23:13:54 +02:00
2008-07-10 08:17:14 +02:00
2008-07-22 19:24:31 +10:00
2008-07-24 10:47:17 -07:00
2008-07-04 10:40:05 -07:00
2008-07-20 12:42:40 +03:00
2008-07-20 12:42:32 +03:00
2008-07-14 15:59:33 -04:00
2008-07-14 16:11:52 +02:00
2008-06-27 09:39:47 +01:00
2008-07-24 10:47:21 -07:00
2008-07-24 10:47:21 -07:00
2008-07-24 10:47:21 -07:00
2008-07-24 10:47:21 -07:00
2008-07-09 16:30:45 +10:00
2008-07-14 10:02:12 +02:00
2008-07-22 19:24:27 +10:00
2008-07-11 19:27:31 -04:00
2008-07-03 17:51:57 +09:00
2008-07-03 17:51:57 +09:00
2008-07-08 03:03:01 -07:00
2008-07-22 14:09:06 -07:00
2008-07-08 02:36:40 -07:00
2008-07-09 12:09:40 -04:00
2008-07-09 12:09:17 -04:00
2008-07-09 12:09:24 -04:00
2008-07-09 12:09:16 -04:00
2008-06-27 09:09:17 -04:00
2008-07-22 10:39:30 +10:00
2008-07-24 10:47:15 -07:00
2008-07-24 10:47:15 -07:00
2008-07-23 12:03:18 -07:00
2008-07-07 16:26:50 -07:00
2008-07-16 17:25:46 -07:00
2008-07-11 19:27:31 -04:00
2008-07-14 20:36:32 -07:00
2008-07-20 00:08:47 -07:00
2008-07-14 14:30:21 -07:00
2008-07-16 23:27:07 +02:00
2008-07-22 14:19:19 -07:00
2008-07-14 15:01:47 +10:00
2008-07-03 13:25:05 +01:00
2008-07-04 10:40:07 -07:00
2008-06-26 14:21:22 -04:00
2008-07-20 00:08:47 -07:00
2008-07-23 14:42:09 +02:00
2008-07-24 10:47:14 -07:00
2008-07-04 10:40:08 -07:00
2008-07-14 15:04:06 +10:00
2008-07-18 04:07:44 -07:00
2008-07-20 17:12:35 -07:00
2008-07-08 10:33:01 -04:00
2008-07-14 22:49:06 -07:00
2008-07-24 10:47:21 -07:00
2008-07-04 10:40:04 -07:00
2008-07-12 21:52:41 +01:00
2008-07-04 11:26:40 +02:00
2008-07-19 22:35:47 -07:00
2008-07-20 17:12:37 -07:00
2008-07-24 10:47:13 -07:00
2008-07-22 13:03:29 -07:00
2008-07-21 21:55:02 -07:00
2008-07-21 21:55:01 -07:00
2008-07-19 00:07:02 -07:00
2008-07-08 02:38:40 -07:00
2008-06-25 19:25:42 -04:00
2008-07-22 13:03:28 -07:00
2008-07-20 17:12:34 -07:00
2008-07-22 13:03:27 -07:00
2008-07-21 21:54:55 -07:00
2008-07-21 15:16:40 -07:00
2008-07-21 15:15:55 -07:00
2008-07-20 07:17:02 -03:00
2008-07-24 10:47:14 -07:00
2008-07-15 08:36:38 -07:00
2008-07-10 16:55:37 -07:00
5459c164f0