projects / linux-2.6-block.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 6e556ce) | patch
capabilities: allow nice if we are privileged
authorSerge Hallyn <serge.hallyn@ubuntu.com>
Tue, 23 Jul 2013 18:18:53 +0000 (13:18 -0500)
committerEric W. Biederman <ebiederm@xmission.com>
Sat, 31 Aug 2013 06:44:09 +0000 (23:44 -0700)
commitf54fb863c6bbcbafdfc332b4a4260abb5a002137
treeced72284affb914341940a5f854e4d2dd56622d1tree | snapshot
parent6e556ce209b09528dbf1931cbfd5d323e1345926commit | diff
capabilities: allow nice if we are privileged

We allow task A to change B's nice level if it has a supserset of
B's privileges, or of it has CAP_SYS_NICE.  Also allow it if A has
CAP_SYS_NICE with respect to B - meaning it is root in the same
namespace, or it created B's namespace.

Signed-off-by: Serge Hallyn <serge.hallyn@canonical.com>
Reviewed-by: "Eric W. Biederman" <ebiederm@xmission.com>
Signed-off-by: Eric W. Biederman <ebiederm@xmission.com>
security/commoncap.c diff | blob | blame | history
Linux 6.x block layer and io_uring tree(s)