diff options
| author | Jann Horn <jann@thejh.net> | 2015-12-26 06:00:48 +0100 |
|---|---|---|
| committer | Kees Cook <keescook@google.com> | 2016-04-08 12:49:21 -0700 |
| commit | b0f3cdf057ad85790d0739130443b01e71040d01 (patch) | |
| tree | 0ad08fd14054e49505997e0fd09b7ab4cd1cd08c /mm | |
| parent | 46e76b0c807df39c2220f5dbb92075157d2dfe63 (diff) | |
| download | qcom-msm-v3.10-master.tar.gz | |
Before this patch, a process with some permissive seccomp filter
that was applied by root without NO_NEW_PRIVS was able to add
more filters to itself without setting NO_NEW_PRIVS by setting
the new filter from a throwaway thread with NO_NEW_PRIVS.
Signed-off-by: Jann Horn <jann@thejh.net>
Cc: stable@vger.kernel.org
Signed-off-by: Kees Cook <keescook@chromium.org>
Bug: 28020023
Patchset: seccomp
(cherry picked from commit 103502a35cfce0710909da874f092cb44823ca03)
Signed-off-by: Kees Cook <keescook@google.com>
Change-Id: Ie7cd72d68d72699d4923b665f1d0af55e7ac5024
Diffstat (limited to 'mm')
0 files changed, 0 insertions, 0 deletions