On Thu, Jul 5, 2012 at 11:23 AM, Andy Lutomirski <luto@xxxxxxxxxxxxxx> wrote: > The documentation didn't actually mention how to enable no_new_privs. > This also adds a note about possible interactions between > no_new_privs and LSMs (i.e. why teaching systemd to set no_new_privs > is not necessarily a good idea), and it references the new docs > from include/linux/prctl.h. > > Suggested-by: Rob Landley <rob@xxxxxxxxxxx> > Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxxxxxx> Acked-by: Kees Cook <keescook@xxxxxxxxxxxx> Rob or James, do either of you have a high-priority tree for Linus? It would be great to get this into 3.5. -Kees -- Kees Cook Chrome OS Security -- To unsubscribe from this list: send the line "unsubscribe linux-doc" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
