Re: [PATCH v3 10/15] exec: Use secureexec for setting dumpability

2017-07-25 Thread Kees Cook
On Tue, Jul 18, 2017 at 3:25 PM, Kees Cook wrote: > The examination of "current" to decide dumpability is wrong. This was a > check of and euid/uid (or egid/gid) mismatch in the existing process, > not the newly created one. This appears to stretch back into even the > "history.git" tree. Luckily,

[PATCH v3 10/15] exec: Use secureexec for setting dumpability

2017-07-18 Thread Kees Cook
The examination of "current" to decide dumpability is wrong. This was a check of and euid/uid (or egid/gid) mismatch in the existing process, not the newly created one. This appears to stretch back into even the "history.git" tree. Luckily, dumpability is later set in commit_creds(). In earlier ker