]>
Commit | Line | Data |
---|---|---|
2380c486 JR |
1 | --- linux-2.6.20/grsecurity/gracl_shm.c~ 2007-03-24 04:54:27.000000000 +0100 |
2 | +++ linux-2.6.20/grsecurity/gracl_shm.c 2007-03-24 04:55:46.332159000 +0100 | |
3 | @@ -6,6 +6,7 @@ | |
4 | #include <linux/gracl.h> | |
5 | #include <linux/grsecurity.h> | |
6 | #include <linux/grinternal.h> | |
7 | +#include <linux/vs_pid.h> | |
8 | ||
9 | int | |
10 | gr_handle_shmat(const pid_t shm_cprid, const pid_t shm_lapid, | |
11 | --- linux-2.6.20/localversion-grsec 2007-03-24 04:54:27.000000000 +0100 | |
12 | +++ /dev/null 2007-03-24 05:05:10.455414500 +0100 | |
13 | @@ -1 +0,0 @@ | |
14 | --grsec | |
15 | --- linux-2.6.20/grsecurity/grsec_sock.c~ 2007-03-24 05:38:40.000000000 +0100 | |
16 | +++ linux-2.6.20/grsecurity/grsec_sock.c 2007-03-24 05:47:11.347998750 +0100 | |
17 | @@ -7,6 +7,7 @@ | |
18 | #include <linux/ip.h> | |
19 | #include <net/sock.h> | |
20 | #include <net/inet_sock.h> | |
21 | +#include <linux/vs_context.h> | |
22 | #include <linux/grsecurity.h> | |
23 | #include <linux/grinternal.h> | |
24 | #include <linux/gracl.h> | |
25 | === | |
26 | === analogous as capable() | |
27 | === | |
cc283cfa AM |
28 | --- linux-2.6.37/kernel/capability.c~ 2011-02-23 10:36:01.806613056 +0100 |
29 | +++ linux-2.6.37/kernel/capability.c 2011-02-23 10:53:44.781787616 +0100 | |
30 | @@ -325,6 +325,9 @@ | |
2380c486 | 31 | |
cc283cfa AM |
32 | int capable_nolog(int cap) |
33 | { | |
34 | + /* here for now so we don't require task locking */ | |
2380c486 JR |
35 | + if (vs_check_bit(VXC_CAP_MASK, cap) && !vx_mcaps(1L << cap)) |
36 | + return 0; | |
cc283cfa AM |
37 | if (unlikely(!cap_valid(cap))) { |
38 | printk(KERN_CRIT "capable() called with invalid cap=%u\n", cap); | |
39 | BUG(); |