Bug#770492: [RFC PATCH RESEND] vfs: Move security_inode_killpriv() after permission checks

2015-01-21 Thread Casey Schaufler
On 1/21/2015 6:03 AM, Stephen Smalley wrote: > On 01/20/2015 06:17 PM, James Morris wrote: >> On Sat, 17 Jan 2015, Ben Hutchings wrote: >> >>> chown() and write() should clear all privilege attributes on >>> a file - setuid, setgid, setcap and any other extended >>> privilege attributes. >>> >>> Ho

Bug#770492: [RFC PATCH RESEND] vfs: Move security_inode_killpriv() after permission checks

2015-01-20 Thread Casey Schaufler
On 1/20/2015 3:17 PM, James Morris wrote: > On Sat, 17 Jan 2015, Ben Hutchings wrote: > >> chown() and write() should clear all privilege attributes on >> a file - setuid, setgid, setcap and any other extended >> privilege attributes. >> >> However, any attributes beyond setuid and setgid are manag