Re: [PATCH] Smack: ignore null signal in smack_task_kill

2016-06-08 Thread Casey Schaufler
On 4/4/2016 2:14 AM, Rafal Krypa wrote: > Kill with signal number 0 is commonly used for checking PID existence. > Smack treated such cases like any other kills, although no signal is > actually delivered when sig == 0. > > Checking permissions when sig == 0 didn't prevent an unprivileged caller >

Re: [PATCH] Smack: ignore null signal in smack_task_kill

2016-06-08 Thread Casey Schaufler
On 4/4/2016 2:14 AM, Rafal Krypa wrote: > Kill with signal number 0 is commonly used for checking PID existence. > Smack treated such cases like any other kills, although no signal is > actually delivered when sig == 0. > > Checking permissions when sig == 0 didn't prevent an unprivileged caller >

[PATCH] Smack: ignore null signal in smack_task_kill

2016-04-04 Thread Rafal Krypa
Kill with signal number 0 is commonly used for checking PID existence. Smack treated such cases like any other kills, although no signal is actually delivered when sig == 0. Checking permissions when sig == 0 didn't prevent an unprivileged caller from learning whether PID exists or not. When it

[PATCH] Smack: ignore null signal in smack_task_kill

2016-04-04 Thread Rafal Krypa
Kill with signal number 0 is commonly used for checking PID existence. Smack treated such cases like any other kills, although no signal is actually delivered when sig == 0. Checking permissions when sig == 0 didn't prevent an unprivileged caller from learning whether PID exists or not. When it