tree d1bd302c8d66862da45b494cbc766fb4caa5e23e
parent 8bbf4976b59fc9fc2861e79cab7beb3f6d647640
author David Howells <dhowells@redhat.com> 1226619554 +1100
committer James Morris <jmorris@namei.org> 1226619554 +1100

CRED: Neuter sys_capset()

Take away the ability for sys_capset() to affect processes other than current.

This means that current will not need to lock its own credentials when reading
them against interference by other processes.

This has effectively been the case for a while anyway, since:

 (1) Without LSM enabled, sys_capset() is disallowed.

 (2) With file-based capabilities, sys_capset() is neutered.

Signed-off-by: David Howells <dhowells@redhat.com>
Acked-by: Serge Hallyn <serue@us.ibm.com>
Acked-by: Andrew G. Morgan <morgan@kernel.org>
Acked-by: James Morris <jmorris@namei.org>
Signed-off-by: James Morris <jmorris@namei.org>