31 Oct, 2011

1 commit

• 9984de1a5   kernel: Map most files to use export.h instead of module.h ... Browse Code »

  The changed files were only including linux/module.h for the
  EXPORT_SYMBOL infrastructure, and nothing else. Revector them
  onto the isolated export header for faster compile times.

  Nothing to see here but a whole lot of instances of:

  -#include
  +#include

  This commit is only changing the kernel dir; next targets
  will probably be mm, fs, the arch dirs, etc.

  Signed-off-by: Paul Gortmaker

  Paul Gortmaker

  2011-10-31 21:20:12 +0800  

24 Mar, 2011

1 commit

• b0e77598f   userns: user namespaces: convert several capable() calls ... Browse Code »

  CAP_IPC_OWNER and CAP_IPC_LOCK can be checked against current_user_ns(),
  because the resource comes from current's own ipc namespace.

  setuid/setgid are to uids in own namespace, so again checks can be against
  current_user_ns().

  Changelog:
  Jan 11: Use task_ns_capable() in place of sched_capable().
  Jan 11: Use nsown_capable() as suggested by Bastian Blank.
  Jan 11: Clarify (hopefully) some logic in futex and sched.c
  Feb 15: use ns_capable for ipc, not nsown_capable
  Feb 23: let copy_ipcs handle setting ipc_ns->user_ns
  Feb 23: pass ns down rather than taking it from current

  [akpm@linux-foundation.org: coding-style fixes]
  Signed-off-by: Serge E. Hallyn
  Acked-by: "Eric W. Biederman"
  Acked-by: Daniel Lezcano
  Acked-by: David Howells
  Cc: James Morris
  Signed-off-by: Andrew Morton
  Signed-off-by: Linus Torvalds

  Serge E. Hallyn

  2011-03-24 10:47:08 +0800  

10 Sep, 2010

1 commit

• 1c24de60e   kernel/groups.c: fix integer overflow in groups_search ... Browse Code »

  gid_t is a unsigned int. If group_info contains a gid greater than
  MAX_INT, groups_search() function may look on the wrong side of the search
  tree.

  This solves some unfair "permission denied" problems.

  Signed-off-by: Jerome Marchand
  Cc:
  Signed-off-by: Andrew Morton
  Signed-off-by: Linus Torvalds

  Jerome Marchand

  2010-09-10 09:57:24 +0800  

12 Apr, 2010

1 commit

• 6307f8fee   security: remove dead hook task_setgroups ... Browse Code »

  Unused hook. Remove.

  Signed-off-by: Eric Paris
  Signed-off-by: James Morris

  Eric Paris

  2010-04-12 10:19:18 +0800  

17 Jun, 2009

1 commit

• 30639b6af   groups: move code to kernel/groups.c ... Browse Code »

  Move supplementary groups implementation to kernel/groups.c .
  kernel/sys.c already accumulated quite a few random stuff.

  Do strictly copy/paste + add required headers to compile. Compile-tested
  on many configs and archs.

  Signed-off-by: Alexey Dobriyan
  Cc: Ingo Molnar
  Signed-off-by: Andrew Morton
  Signed-off-by: Linus Torvalds

  Alexey Dobriyan

  2009-06-17 10:47:48 +0800