| commit | 70169420f555210147f3cab74bb0f6debd488bdb | [log] [tgz] |
|---|---|---|
| author | Eric W. Biederman <ebiederm@xmission.com> | Thu Nov 17 01:38:35 2016 -0600 |
| committer | Eric W. Biederman <ebiederm@xmission.com> | Tue Jan 24 12:03:07 2017 +1300 |
| tree | 364f9a2a9d576c91178ba0b5d3c1d671da7301ba | |
| parent | 1cce1eea0aff51201753fcaca421df825b0813b6 [diff] |
exec: Don't reset euid and egid when the tracee has CAP_SETUID Don't reset euid and egid when the tracee has CAP_SETUID in it's user namespace. I punted on relaxing this permission check long ago but now that I have read this code closely it is clear it is safe to test against CAP_SETUID in the user namespace. Signed-off-by: "Eric W. Biederman" <ebiederm@xmission.com>