linux

iv/linux

History

Eric W. Biederman 939f8b4918 cgroup-v1: Require capabilities to set release_agent

commit 24f6008564183aa120d07c03d9289519c2fe02af upstream.

The cgroup release_agent is called with call_usermodehelper.  The function
call_usermodehelper starts the release_agent with a full set fo capabilities.
Therefore require capabilities when setting the release_agaent.

Reported-by: Tabitha Sable <tabitha.c.sable@gmail.com>
Tested-by: Tabitha Sable <tabitha.c.sable@gmail.com>
Fixes: 81a6a5cdd2c5 ("Task Control Groups: automatic userspace notification of idle cgroups")
Cc: stable@vger.kernel.org # v2.6.24+
Signed-off-by: "Eric W. Biederman" <ebiederm@xmission.com>
Signed-off-by: Tejun Heo <tj@kernel.org>
[mkoutny: Adjust for pre-fs_context, duplicate mount/remount check, drop log messages.]
Acked-by: Michal Koutný <mkoutny@suse.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2022-02-11 08:44:59 +01:00

cgroup-internal.h

cgroup/tracing: Move taking of spin lock out of trace event handlers

2018-07-11 10:48:47 -07:00

cgroup-v1.c

cgroup-v1: Require capabilities to set release_agent

2022-02-11 08:44:59 +01:00

cgroup.c

cgroup: Make rebind_subsystems() disable v2 controllers all at once

2021-11-26 11:36:07 +01:00

cpuset.c

cpuset: restore sanity to cpuset_cpus_allowed_fallback()