tree 4c9c08d7fb77744b1fd04615a76ab0a9105fad07
parent 22ae77bc7ac115b9d518d5cbc13d39317079b2b0
author Oleg Nesterov <oleg@redhat.com> 1239027362 +0200
committer Linus Torvalds <torvalds@linux-foundation.org> 1239055043 -0700

exit_notify: kill the wrong capable(CAP_KILL) check

The CAP_KILL check in exit_notify() looks just wrong, kill it.

Whatever logic we have to reset ->exit_signal, the malicious user
can bypass it if it execs the setuid application before exiting.

Signed-off-by: Oleg Nesterov <oleg@redhat.com>
Acked-by: Serge Hallyn <serue@us.ibm.com>
Acked-by: Roland McGrath <roland@redhat.com>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>