diff options
| author | rickyz <rickyz@chromium.org> | 2015-02-11 15:32:41 -0800 |
|---|---|---|
| committer | Commit bot <commit-bot@chromium.org> | 2015-02-11 23:33:53 +0000 |
| commit | af7f464485b6831eeabd91276fa2d558c3e55878 (patch) | |
| tree | 418690231bf3c40970c286ba7a625d642445d234 /tools | |
| parent | fec39c2a98caa657fd4100aea59916040de562aa (diff) | |
| download | chromium_src-af7f464485b6831eeabd91276fa2d558c3e55878.zip chromium_src-af7f464485b6831eeabd91276fa2d558c3e55878.tar.gz chromium_src-af7f464485b6831eeabd91276fa2d558c3e55878.tar.bz2 | |
Deny setgroups if needed before writing to gid_map.
On Linux 3.18.2 and later, in order to write to /proc/PID/gid_map,
either setgroups must be disabled in the target process's user
namespace, or the writer must have CAP_SETGID. This change disables
setgroups by writing to /proc/PID/setgroups.
Thanks neusepoff for catching this issue.
BUG=457362
Review URL: https://codereview.chromium.org/909333002
Cr-Commit-Position: refs/heads/master@{#315865}
Diffstat (limited to 'tools')
0 files changed, 0 insertions, 0 deletions