From 2628814b59f33d6a1aae535adc7ef44359aafe98 Mon Sep 17 00:00:00 2001 From: "Serge E. Hallyn" Date: Sun, 24 Feb 2008 02:10:07 +0000 Subject: [PATCH] file capabilities: simplify signal check commit: 094972840f2e7c1c6fc9e1a97d817cc17085378e Simplify the uid equivalence check in cap_task_kill(). Anyone can kill a process owned by the same uid. Without this patch wireshark is reported to fail. Signed-off-by: Serge E. Hallyn Signed-off-by: Andrew G. Morgan Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds Signed-off-by: Chris Wright Signed-off-by: Greg Kroah-Hartman --- security/commoncap.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/security/commoncap.c b/security/commoncap.c index ea61bc73f6d3c..e87422e766dd6 100644 --- a/security/commoncap.c +++ b/security/commoncap.c @@ -539,7 +539,7 @@ int cap_task_kill(struct task_struct *p, struct siginfo *info, * allowed. * We must preserve legacy signal behavior in this case. */ - if (p->euid == 0 && p->uid == current->uid) + if (p->uid == current->uid) return 0; /* sigcont is permitted within same session */ -- 2.47.2