Will Drewry <wad@xxxxxxxxxxxx> writes: > One consideration could be to add do_exit()s at known DAC transitions > (set*id, fcaps). I don't know if that'd be wise, but it would remove > some described ambiguity. The same could be done with exec when the > (e)uid/gid/fcaps change. However, none of that helps with the opaque > LSM data, so that'd have to be left up to the LSMs and the LSM_* flag > you've added. I went through and audited userspace recently and I could not find anything that did not handle setuid failing. It looks like kernel developers are not the only ones who learned from the sendmail/capabilities problem. Eric -- To unsubscribe from this list: send the line "unsubscribe linux-fsdevel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
