projects / linux-2.6 / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 22ae77b) | patch
exit_notify: kill the wrong capable(CAP_KILL) check
authorOleg Nesterov <oleg@redhat.com>
Mon, 6 Apr 2009 14:16:02 +0000 (16:16 +0200)
committerLinus Torvalds <torvalds@linux-foundation.org>
Mon, 6 Apr 2009 21:57:23 +0000 (14:57 -0700)
commit432870dab85a2f69dc417022646cb9a70acf7f94
tree4c9c08d7fb77744b1fd04615a76ab0a9105fad07tree | snapshot
parent22ae77bc7ac115b9d518d5cbc13d39317079b2b0commit | diff
exit_notify: kill the wrong capable(CAP_KILL) check

The CAP_KILL check in exit_notify() looks just wrong, kill it.

Whatever logic we have to reset ->exit_signal, the malicious user
can bypass it if it execs the setuid application before exiting.

Signed-off-by: Oleg Nesterov <oleg@redhat.com>
Acked-by: Serge Hallyn <serue@us.ibm.com>
Acked-by: Roland McGrath <roland@redhat.com>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
kernel/exit.c diff | blob | blame | history
Making Linux better for my computers