On Thu, 5 Jul 2012, Kees Cook wrote: > On Thu, Jul 5, 2012 at 11:23 AM, Andy Lutomirski <luto@xxxxxxxxxxxxxx> wrote: > > The documentation didn't actually mention how to enable no_new_privs. > > This also adds a note about possible interactions between > > no_new_privs and LSMs (i.e. why teaching systemd to set no_new_privs > > is not necessarily a good idea), and it references the new docs > > from include/linux/prctl.h. > > > > Suggested-by: Rob Landley <rob@xxxxxxxxxxx> > > Signed-off-by: Andy Lutomirski <luto@xxxxxxxxxxxxxx> > > Acked-by: Kees Cook <keescook@xxxxxxxxxxxx> > > Rob or James, do either of you have a high-priority tree for Linus? It > would be great to get this into 3.5. I push to Linus like this via for-linusN - James -- James Morris <jmorris@xxxxxxxxx> -- To unsubscribe from this list: send the line "unsubscribe linux-doc" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html