diff options
| author | Jeff Layton <jlayton@samba.org> | 2010-04-03 06:49:43 -0400 |
|---|---|---|
| committer | Jeff Layton <jlayton@samba.org> | 2010-04-03 06:49:43 -0400 |
| commit | 55c00c67ced28102209e640fd50bcab9d0332a7f (patch) | |
| tree | 32a54b390114d8f617e65e761c6d556adc96238d /install-sh | |
| parent | d652b86adc7e9c62ba71b315e91fdd24af0063d8 (diff) | |
| download | cifs-utils-55c00c67ced28102209e640fd50bcab9d0332a7f.tar.gz cifs-utils-55c00c67ced28102209e640fd50bcab9d0332a7f.tar.bz2 cifs-utils-55c00c67ced28102209e640fd50bcab9d0332a7f.zip | |
mount.cifs: only enable CAP_DAC_OVERRIDE when needed
When dropping capabilities, drop CAP_DAC_OVERRIDE from the effective set
but not the permitted. When we need to open credential or password
files, make it effective again and drop it after the open completes.
This reduces CAP_DAC_OVERRIDE exposure.
Signed-off-by: Jeff Layton <jlayton@redhat.com>
Diffstat (limited to 'install-sh')
0 files changed, 0 insertions, 0 deletions