Re: [PATCH 10/11] capsicum: prctl(2) to force use of O_BENEATH

2014-07-27 Thread David Drysdale
On Fri, Jul 25, 2014 at 5:00 PM, Andy Lutomirski wrote: > > On Jul 25, 2014 7:02 AM, "Paolo Bonzini" wrote: > > > > Il 25/07/2014 15:47, David Drysdale ha scritto: > > > @@ -1996,6 +2013,17 @@ SYSCALL_DEFINE5(prctl, int, option, unsigned long, > > > arg2, unsigned long, arg3, > > >

Re: [PATCH 10/11] capsicum: prctl(2) to force use of O_BENEATH

2014-07-25 Thread Andy Lutomirski
On Jul 25, 2014 7:02 AM, "Paolo Bonzini" wrote: > > Il 25/07/2014 15:47, David Drysdale ha scritto: > > @@ -1996,6 +2013,17 @@ SYSCALL_DEFINE5(prctl, int, option, unsigned long, > > arg2, unsigned long, arg3, > > if (arg2 || arg3 || arg4 || arg5) > > return -EI

Re: [PATCH 10/11] capsicum: prctl(2) to force use of O_BENEATH

2014-07-25 Thread Paolo Bonzini
Il 25/07/2014 15:47, David Drysdale ha scritto: > @@ -1996,6 +2013,17 @@ SYSCALL_DEFINE5(prctl, int, option, unsigned long, > arg2, unsigned long, arg3, > if (arg2 || arg3 || arg4 || arg5) > return -EINVAL; > return current->no_new_privs ? 1 : 0; >

[PATCH 10/11] capsicum: prctl(2) to force use of O_BENEATH

2014-07-25 Thread David Drysdale
Add a per-task flag that indicates all openat(2) operations should implicitly have the O_BENEATH flag set. Add a prctl(2) command to set this flag (irrevocably). Include an option to force the flag set to be synchronized across all tasks in the thread group. Signed-off-by: David Drysdale --- fs