diff options
| author | Jann Horn <jann@thejh.net> | 2015-12-26 06:00:48 +0100 |
|---|---|---|
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2016-03-03 15:07:25 -0800 |
| commit | df86161e4460cfd4ba504d5c5fd6ba218c75d4aa (patch) | |
| tree | c0eaaaf9ea33945d1a5d37ac261cba6f2fdd25e1 /drivers/usb/class/cdc-acm.c | |
| parent | 0ac4a2a8bae9838d69be6dec3212e3630fb5773c (diff) | |
seccomp: always propagate NO_NEW_PRIVS on tsync
commit 103502a35cfce0710909da874f092cb44823ca03 upstream.
Before this patch, a process with some permissive seccomp filter
that was applied by root without NO_NEW_PRIVS was able to add
more filters to itself without setting NO_NEW_PRIVS by setting
the new filter from a throwaway thread with NO_NEW_PRIVS.
Signed-off-by: Jann Horn <jann@thejh.net>
Signed-off-by: Kees Cook <keescook@chromium.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'drivers/usb/class/cdc-acm.c')
0 files changed, 0 insertions, 0 deletions