Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Migrate NO_NEW_PRIVS prctl #2228

Closed
wants to merge 3 commits into from

Commits on Jul 27, 2023

  1. prctl: Migrate prctl(NO_NEW_PRIVS) setting.

    Signed-off-by: Michał Mirosław <[email protected]>
    osctobe committed Jul 27, 2023
    Configuration menu
    Copy the full SHA
    6bad5d2 View commit details
    Browse the repository at this point in the history
  2. prctl: test prctl(NO_NEW_PRIVS) setting

    Signed-off-by: Michał Mirosław <[email protected]>
    osctobe committed Jul 27, 2023
    Configuration menu
    Copy the full SHA
    d490218 View commit details
    Browse the repository at this point in the history
  3. restore: Skip dropping BSET capability if irrelevant.

    prctl(NO_NEW_PRIVS) when set prevents child processes gaining
    capabilities not in permitted set. In this case, inability to
    clear capability from BSET that is not in the permitted set is
    harmless.
    
    Signed-off-by: Michał Mirosław <[email protected]>
    osctobe committed Jul 27, 2023
    Configuration menu
    Copy the full SHA
    988a5f4 View commit details
    Browse the repository at this point in the history