diff options
| author | Gautam Menghani <gautammenghani201@gmail.com> | 2022-07-31 14:55:29 +0530 |
|---|---|---|
| committer | Kees Cook <keescook@chromium.org> | 2022-12-02 11:32:53 -0800 |
| commit | fc1e3980044f0f812252f5f164a8350376d62eb7 (patch) | |
| tree | fa260d5842ee2ee72fa2dd3d83711015066c435a /kernel/fork.c | |
| parent | 247f34f7b80357943234f93f247a1ae6b6c3a740 (diff) | |
| download | linux-fc1e3980044f0f812252f5f164a8350376d62eb7.tar.bz2 | |
selftests/seccomp: Check CAP_SYS_ADMIN capability in the test mode_filter_without_nnp
In the "mode_filter_without_nnp" test in seccomp_bpf, there is currently
a TODO which asks to check the capability CAP_SYS_ADMIN instead of euid.
This patch adds support to check if the calling process has the flag
CAP_SYS_ADMIN, and also if this flag has CAP_EFFECTIVE set.
Signed-off-by: Gautam Menghani <gautammenghani201@gmail.com>
Signed-off-by: Kees Cook <keescook@chromium.org>
Link: https://lore.kernel.org/r/20220731092529.28760-1-gautammenghani201@gmail.com
Diffstat (limited to 'kernel/fork.c')
0 files changed, 0 insertions, 0 deletions