• Casey Schaufler's avatar
    Smack: ptrace capability use fixes · dcb569cf
    Casey Schaufler authored
    This fixes a pair of problems in the Smack ptrace checks
    related to checking capabilities. In both cases, as reported
    by Lukasz Pawelczyk, the raw capability calls are used rather
    than the Smack wrapper that check addition restrictions.
    In one case, as reported by Jann Horn, the wrong task is being
    checked for capabilities.
    Signed-off-by: default avatarCasey Schaufler <casey@schaufler-ca.com>
    dcb569cf
smack_lsm.c 118 KB