Files
android_kernel_fxtec_sm6115/include/linux
Micah Morton bd3cbe14b0 BACKPORT: LSM: add SafeSetID module that gates setid calls
This change ensures that the set*uid family of syscalls in kernel/sys.c
(setreuid, setuid, setresuid, setfsuid) all call ns_capable_common with
the CAP_OPT_INSETID flag, so capability checks in the security_capable
hook can know whether they are being called from within a set*uid
syscall. This change is a no-op by itself, but is needed for the
proposed SafeSetID LSM.

Change-Id: Ie661692d340f57b74c5cd6623159c028795d481f
Signed-off-by: Micah Morton <mortonm@chromium.org>
Acked-by: Kees Cook <keescook@chromium.org>
Signed-off-by: James Morris <james.morris@microsoft.com>
2025-09-08 01:35:16 -04:00
..
2025-08-31 10:10:00 +01:00
2022-10-26 13:19:32 +02:00
2022-12-17 00:25:35 +02:00
2025-09-08 01:35:13 -04:00
2024-06-09 02:32:30 +03:00
2022-08-25 11:15:23 +02:00
2023-06-21 15:39:57 +02:00
2023-02-22 12:28:07 +00:00
2025-04-04 11:35:21 +02:00
2025-08-28 03:26:18 +03:00
2023-10-25 11:16:20 +02:00
2023-05-18 15:51:07 +00:00
2024-02-23 08:12:39 +01:00