On Tue, 18 Jul 2017, Kees Cook wrote: > Instead of a separate function, open-code the cap_elevated test, which > lets us entirely remove bprm->cap_effective (to use the local "effective" > variable instead), and more accurately examine euid/egid changes via the > existing local "is_setid". > > Cc: Serge Hallyn <[email protected]> > Cc: Andy Lutomirski <[email protected]> > Signed-off-by: Kees Cook <[email protected]>
Reviewed-by: James Morris <[email protected]> -- James Morris <[email protected]>
