linux-toradex.git/kernel/uid16.c, branch v4.8-rc6

groups: Consolidate the setgroups permission checks

2014-12-05T23:19:27+00:00

Today there are 3 instances of setgroups and due to an oversight their
permission checking has diverged.  Add a common function so that
they may all share the same permission checking code.

This corrects the current oversight in the current permission checks
and adds a helper to avoid this in the future.

A user namespace security fix will update this new helper, shortly.

Cc: stable@vger.kernel.org
Signed-off-by: "Eric W. Biederman"

userns: Kill nsown_capable it makes the wrong thing easy

2013-08-31T06:44:11+00:00

nsown_capable is a special case of ns_capable essentially for just CAP_SETUID and
CAP_SETGID.  For the existing users it doesn't noticably simplify things and
from the suggested patches I have seen it encourages people to do the wrong
thing.  So remove nsown_capable.

Acked-by: Serge Hallyn 
Signed-off-by: "Eric W. Biederman"

make SYSCALL_DEFINE-generated wrappers do asmlinkage_protect

2013-03-04T03:58:33+00:00

... and switch i386 to HAVE_SYSCALL_WRAPPERS, killing open-coded
uses of asmlinkage_protect() in a bunch of syscalls.

Signed-off-by: Al Viro

userns: Convert setting and getting uid and gid system calls to use kuid and kgid

2012-05-03T10:28:41+00:00

Convert setregid, setgid, setreuid, setuid,
setresuid, getresuid, setresgid, getresgid, setfsuid, setfsgid,
getuid, geteuid, getgid, getegid,
waitpid, waitid, wait4.

Convert userspace uids and gids into kuids and kgids before
being placed on struct cred.  Convert struct cred kuids and
kgids into userspace uids and gids when returning them.

Signed-off-by: Eric W. Biederman

userns: Convert group_info values from gid_t to kgid_t.

2012-05-03T10:27:21+00:00

As a first step to converting struct cred to be all kuid_t and kgid_t
values convert the group values stored in group_info to always be
kgid_t values.   Unless user namespaces are used this change should
have no effect.

Acked-by: Serge Hallyn 
Signed-off-by: Eric W. Biederman

userns: user namespaces: convert several capable() calls

2011-03-24T02:47:08+00:00

CAP_IPC_OWNER and CAP_IPC_LOCK can be checked against current_user_ns(),
because the resource comes from current's own ipc namespace.

setuid/setgid are to uids in own namespace, so again checks can be against
current_user_ns().

Changelog:
	Jan 11: Use task_ns_capable() in place of sched_capable().
	Jan 11: Use nsown_capable() as suggested by Bastian Blank.
	Jan 11: Clarify (hopefully) some logic in futex and sched.c
	Feb 15: use ns_capable for ipc, not nsown_capable
	Feb 23: let copy_ipcs handle setting ipc_ns->user_ns
	Feb 23: pass ns down rather than taking it from current

[akpm@linux-foundation.org: coding-style fixes]
Signed-off-by: Serge E. Hallyn 
Acked-by: "Eric W. Biederman" 
Acked-by: Daniel Lezcano 
Acked-by: David Howells 
Cc: James Morris 
Signed-off-by: Andrew Morton 
Signed-off-by: Linus Torvalds

headers: utsname.h redux

2009-09-24T01:13:10+00:00

* remove asm/atomic.h inclusion from linux/utsname.h --
   not needed after kref conversion
 * remove linux/utsname.h inclusion from files which do not need it

NOTE: it looks like fs/binfmt_elf.c do not need utsname.h, however
due to some personality stuff it _is_ needed -- cowardly leave ELF-related
headers and files alone.

Signed-off-by: Alexey Dobriyan 
Signed-off-by: Linus Torvalds

[CVE-2009-0029] System call wrappers part 19

2009-01-14T13:15:26+00:00

Signed-off-by: Heiko Carstens

[CVE-2009-0029] System call wrappers part 18

2009-01-14T13:15:25+00:00

Signed-off-by: Heiko Carstens

[CVE-2009-0029] System call wrappers part 17

2009-01-14T13:15:25+00:00

Signed-off-by: Heiko Carstens