Eric W. Biederman 7ff4d90b4c groups: Consolidate the setgroups permission checks ...

Today there are 3 instances of setgroups and due to an oversight their
permission checking has diverged.  Add a common function so that
they may all share the same permission checking code.

This corrects the current oversight in the current permission checks
and adds a helper to avoid this in the future.

A user namespace security fix will update this new helper, shortly.

Cc: stable@vger.kernel.org
Signed-off-by: "Eric W. Biederman" <ebiederm@xmission.com>

2014-12-05 17:19:27 -06:00

12 KiB

Raw Blame History

View Raw