user/sven/linux.git/kernel/uid16.c, branch v3.12.33

userns: Kill nsown_capable it makes the wrong thing easy

2013-08-31T06:44:11Z

nsown_capable is a special case of ns_capable essentially for just CAP_SETUID and CAP_SETGID. For the existing users it doesn't noticably simplify things and from the suggested patches I have seen it encourages people to do the wrong thing. So remove nsown_capable. Acked-by: Serge Hallyn Signed-off-by: "Eric W. Biederman"

make SYSCALL_DEFINE-generated wrappers do asmlinkage_protect

2013-03-04T03:58:33Z

... and switch i386 to HAVE_SYSCALL_WRAPPERS, killing open-coded uses of asmlinkage_protect() in a bunch of syscalls. Signed-off-by: Al Viro

userns: Convert setting and getting uid and gid system calls to use kuid and kgid

2012-05-03T10:28:41Z

Convert setregid, setgid, setreuid, setuid, setresuid, getresuid, setresgid, getresgid, setfsuid, setfsgid, getuid, geteuid, getgid, getegid, waitpid, waitid, wait4. Convert userspace uids and gids into kuids and kgids before being placed on struct cred. Convert struct cred kuids and kgids into userspace uids and gids when returning them. Signed-off-by: Eric W. Biederman

userns: Convert group_info values from gid_t to kgid_t.

2012-05-03T10:27:21Z

As a first step to converting struct cred to be all kuid_t and kgid_t values convert the group values stored in group_info to always be kgid_t values. Unless user namespaces are used this change should have no effect. Acked-by: Serge Hallyn Signed-off-by: Eric W. Biederman

userns: user namespaces: convert several capable() calls

2011-03-24T02:47:08Z

CAP_IPC_OWNER and CAP_IPC_LOCK can be checked against current_user_ns(), because the resource comes from current's own ipc namespace. setuid/setgid are to uids in own namespace, so again checks can be against current_user_ns(). Changelog: Jan 11: Use task_ns_capable() in place of sched_capable(). Jan 11: Use nsown_capable() as suggested by Bastian Blank. Jan 11: Clarify (hopefully) some logic in futex and sched.c Feb 15: use ns_capable for ipc, not nsown_capable Feb 23: let copy_ipcs handle setting ipc_ns->user_ns Feb 23: pass ns down rather than taking it from current [akpm@linux-foundation.org: coding-style fixes] Signed-off-by: Serge E. Hallyn Acked-by: "Eric W. Biederman" Acked-by: Daniel Lezcano Acked-by: David Howells Cc: James Morris Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds

headers: utsname.h redux

2009-09-24T01:13:10Z

* remove asm/atomic.h inclusion from linux/utsname.h -- not needed after kref conversion * remove linux/utsname.h inclusion from files which do not need it NOTE: it looks like fs/binfmt_elf.c do not need utsname.h, however due to some personality stuff it _is_ needed -- cowardly leave ELF-related headers and files alone. Signed-off-by: Alexey Dobriyan Signed-off-by: Linus Torvalds

[CVE-2009-0029] System call wrappers part 19

2009-01-14T13:15:26Z

Signed-off-by: Heiko Carstens

[CVE-2009-0029] System call wrappers part 18

2009-01-14T13:15:25Z

Signed-off-by: Heiko Carstens

[CVE-2009-0029] System call wrappers part 17

2009-01-14T13:15:25Z

Signed-off-by: Heiko Carstens

CRED: Wrap current->cred and a few other accessors

2008-11-13T23:39:18Z

Wrap current->cred and a few other accessors to hide their actual implementation. Signed-off-by: David Howells Acked-by: James Morris Acked-by: Serge Hallyn Signed-off-by: James Morris