mirror of
https://github.com/BobTheBlinker/android_kernel_motorola_sm6375.git
synced 2026-10-30 11:41:38 -04:00
userns: Convert capabilities related permsion checks
- Use uid_eq when comparing kuids Use gid_eq when comparing kgids - Use make_kuid(user_ns, 0) to talk about the user_namespace root uid Acked-by: Serge Hallyn <[email protected]> Signed-off-by: Eric W. Biederman <[email protected]>
This commit is contained in:
parent
9c806aa06f
commit
18815a1808
2 changed files with 28 additions and 16 deletions
|
|
@ -316,7 +316,8 @@ SYSCALL_DEFINE3(faccessat, int, dfd, const char __user *, filename, int, mode)
|
|||
|
||||
if (!issecure(SECURE_NO_SETUID_FIXUP)) {
|
||||
/* Clear the capabilities if we switch to a non-root user */
|
||||
if (override_cred->uid)
|
||||
kuid_t root_uid = make_kuid(override_cred->user_ns, 0);
|
||||
if (!uid_eq(override_cred->uid, root_uid))
|
||||
cap_clear(override_cred->cap_effective);
|
||||
else
|
||||
override_cred->cap_effective =
|
||||
|
|
|
|||
Loading…
Reference in a new issue