wireguard-linux/Documentation/admin-guide/LSM/SafeSetID.rst, branch jd/orphan-parallelWireGuard for the Linux kernelhttps://git.zx2c4.com/wireguard-linux/atom/Documentation/admin-guide/LSM/SafeSetID.rst?h=jd%2Forphan-parallel2019-10-11T15:58:38Zdocs: SafeSetID.rst: Remove spurious '???' characters2019-10-11T15:58:38ZChristian Kujaulists@nerdbynature.de2019-10-11T03:36:16Zurn:sha1:0e3901891ab66dce0a51579035594c9b685650dd
It appears that some smart quotes were changed to "???" by even smarter
software; change them to the dumb but legible variety.
Signed-off-by: Christian Kujau <lists@nerdbynature.de>
Signed-off-by: Jonathan Corbet <corbet@lwn.net>
LSM: add SafeSetID module that gates setid calls2019-01-25T19:22:45ZMicah Mortonmortonm@chromium.org2019-01-16T15:46:06Zurn:sha1:aeca4e2ca65c1aeacfbe520684e6421719d99417
SafeSetID gates the setid family of syscalls to restrict UID/GID
transitions from a given UID/GID to only those approved by a
system-wide whitelist. These restrictions also prohibit the given
UIDs/GIDs from obtaining auxiliary privileges associated with
CAP_SET{U/G}ID, such as allowing a user to set up user namespace UID
mappings. For now, only gating the set*uid family of syscalls is
supported, with support for set*gid coming in a future patch set.
Signed-off-by: Micah Morton <mortonm@chromium.org>
Acked-by: Kees Cook <keescook@chromium.org>
Signed-off-by: James Morris <james.morris@microsoft.com>