Mark Grondona 73af963f9f __ptrace_may_access() should not deny sub-threads ... __ptrace_may_access() checks get_dumpable/ptrace_has_cap/etc if task != current, this can can lead to surprising results. For example, a sub-thread can't readlink("/proc/self/exe") if the executable is not readable. setup_new_exec()->would_dump() notices that inode_permission(MAY_READ) fails and then it does set_dumpable(suid_dumpable). After that get_dumpable() fails. (It is not clear why proc_pid_readlink() checks get_dumpable(), perhaps we could add PTRACE_MODE_NODUMPABLE) Change __ptrace_may_access() to use same_thread_group() instead of "task == current". Any security check is pointless when the tasks share the same ->mm. Signed-off-by: Mark Grondona <mgrondona@llnl.gov> Signed-off-by: Ben Woodard <woodard@redhat.com> Signed-off-by: Oleg Nesterov <oleg@redhat.com> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>		2013-09-11 15:59:01 -07:00
..
cpu
debug
events	Merge branches 'perf-urgent-for-linus' and 'perf-core-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip	2013-09-04 08:25:35 -07:00
gcov
irq
power	mm: use zone_end_pfn() instead of zone_start_pfn+spanned_pages	2013-09-11 15:57:36 -07:00
printk	TTY/Serial driver patches for 3.12-rc1	2013-09-03 11:38:36 -07:00
sched	Merge branch 'timers-urgent-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip	2013-09-05 12:36:46 -07:00
time	Merge branch 'timers-nohz-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip	2013-09-04 09:36:54 -07:00
trace	Not much changes for the 3.12 merge window. The major tracing changes	2013-09-09 14:42:15 -07:00
.gitignore
acct.c
async.c
audit_tree.c
audit_watch.c
audit.c
audit.h
auditfilter.c
auditsc.c
backtracetest.c
bounds.c
capability.c	xfs: update for v3.12-rc1	2013-09-09 11:19:09 -07:00
cgroup_freezer.c	cgroup: make css_for_each_descendant() and friends include the origin css in the iteration	2013-08-08 20:11:27 -04:00
cgroup.c	Kill indirect include of file.h from eventfd.h, use fdget() in cgroup.c	2013-09-07 19:54:57 -04:00
compat.c
configs.c
context_tracking.c	context_tracking: User/kernel broundary cross trace events	2013-08-14 17:14:48 +02:00
cpu_pm.c
cpu.c	ACPI / processor: Acquire writer lock to update CPU maps	2013-08-13 12:20:16 +02:00
cpuset.c	Merge branch 'for-3.12' of git://git.kernel.org/pub/scm/linux/kernel/git/tj/cgroup	2013-09-03 18:25:03 -07:00
crash_dump.c
cred.c
delayacct.c
dma.c
elfcore.c
exec_domain.c
exit.c
extable.c	extable: skip sorting if the table is empty	2013-09-11 15:58:25 -07:00
fork.c	mm: mempolicy: turn vma_set_policy() into vma_dup_policy()	2013-09-11 15:57:00 -07:00
freezer.c	freezer: set PF_SUSPEND_TASK flag on tasks that call freeze_processes	2013-07-30 14:05:06 +02:00
futex_compat.c
futex.c
groups.c	userns: Kill nsown_capable it makes the wrong thing easy	2013-08-30 23:44:11 -07:00
hrtimer.c
hung_task.c	hung_task debugging: Print more info when reporting the problem	2013-08-02 11:02:42 +02:00
irq_work.c
itimer.c
jump_label.c	jump_label: Split jumplabel ratelimit	2013-08-09 07:53:54 -07:00
kallsyms.c
kcmp.c
Kconfig.freezer
Kconfig.hz
Kconfig.locks
Kconfig.preempt
kexec.c
kmod.c
kprobes.c	kprobes: allow to specify custom allocator for insn caches	2013-09-11 15:58:52 -07:00
ksysfs.c
kthread.c
latencytop.c
lglock.c
lockdep_internals.h
lockdep_proc.c
lockdep_states.h
lockdep.c
Makefile	printk: move to separate directory for easier modification	2013-07-31 14:41:03 -07:00
modsign_certificate.S
modsign_pubkey.c	kernel/modsign_pubkey.c: fix init const for module signing code	2013-09-11 15:58:21 -07:00
module_signing.c
module-internal.h
module.c	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2013-09-05 08:50:26 -07:00
mutex-debug.c
mutex-debug.h
mutex.c	Merge branch 'core-locking-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip	2013-09-04 08:18:19 -07:00
mutex.h
notifier.c
nsproxy.c	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/user-namespace	2013-09-07 14:35:32 -07:00
padata.c	padata - Register hotcpu notifier after initialization	2013-08-29 14:37:59 +10:00
panic.c
params.c	module: Fix mod->mkobj.kobj potentially freed too early	2013-09-03 16:35:47 +09:30
pid_namespace.c	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/user-namespace	2013-09-07 14:35:32 -07:00
pid.c	pidns: Fix hang in zap_pid_ns_processes by sending a potentially extra wakeup	2013-08-30 17:30:37 -07:00
posix-cpu-timers.c
posix-timers.c
profile.c
ptrace.c	__ptrace_may_access() should not deny sub-threads	2013-09-11 15:59:01 -07:00
range.c
rcu.h	rcu: Make call_rcu() leak callbacks for debug-object errors	2013-08-18 17:40:03 -07:00
rcupdate.c	Not much changes for the 3.12 merge window. The major tracing changes	2013-09-09 14:42:15 -07:00
rcutiny_plugin.h	rcu: Add const annotation to char * for RCU tracepoints and functions	2013-07-29 17:07:49 -04:00
rcutiny.c	rcu: Add const annotation to char * for RCU tracepoints and functions	2013-07-29 17:07:49 -04:00
rcutorture.c	rcu: Make rcutorture emit online failures if verbose	2013-08-20 11:38:45 -07:00
rcutree_plugin.h	nohz_full: Force RCU's grace-period kthreads onto timekeeping CPU	2013-08-31 14:44:02 -07:00
rcutree_trace.c
rcutree.c	Merge branches 'doc.2013.08.19a', 'fixes.2013.08.20a', 'sysidle.2013.08.31a' and 'torture.2013.08.20a' into HEAD	2013-08-31 14:44:45 -07:00
rcutree.h	nohz_full: Force RCU's grace-period kthreads onto timekeeping CPU	2013-08-31 14:44:02 -07:00
reboot.c
relay.c
res_counter.c
resource.c
rtmutex_common.h
rtmutex-debug.c
rtmutex-debug.h
rtmutex-tester.c
rtmutex.c
rtmutex.h
rwsem.c
seccomp.c
semaphore.c
signal.c	kernel-wide: fix missing validations on __get/__put/__copy_to/__copy_from_user()	2013-09-11 15:58:18 -07:00
smp.c	kernel/smp.c: quit unconditionally enabling irqs in on_each_cpu_mask().	2013-09-11 15:58:25 -07:00
smpboot.c
smpboot.h
softirq.c
spinlock.c	kernel/spinlock.c: add default arch_*_relax definitions for GENERIC_LOCKBREAK	2013-09-11 15:58:21 -07:00
srcu.c
stacktrace.c
stop_machine.c
sys_ni.c
sys.c	userns: Kill nsown_capable it makes the wrong thing easy	2013-08-30 23:44:11 -07:00
sysctl_binary.c
sysctl.c	mm: prepare to remove /proc/sys/vm/hugepages_treat_as_movable	2013-09-11 15:57:49 -07:00
task_work.c	task_work: documentation	2013-09-11 15:58:27 -07:00
taskstats.c
test_kprobes.c
time.c
timeconst.bc
timer.c
tracepoint.c
tsacct.c
uid16.c	userns: Kill nsown_capable it makes the wrong thing easy	2013-08-30 23:44:11 -07:00
up.c	smp.h: move !SMP version of on_each_cpu() out-of-line	2013-09-11 15:58:25 -07:00
user_namespace.c	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/user-namespace	2013-09-07 14:35:32 -07:00
user-return-notifier.c
user.c	userns: Better restrictions on when proc and sysfs can be mounted	2013-08-26 19:17:03 -07:00
utsname_sysctl.c
utsname.c	userns: Kill nsown_capable it makes the wrong thing easy	2013-08-30 23:44:11 -07:00
wait.c	kernel: fix new kernel-doc warning in wait.c	2013-08-19 09:08:54 -07:00
watchdog.c	watchdog: Make it work under full dynticks	2013-07-30 22:29:15 +02:00
workqueue_internal.h
workqueue.c	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jikos/trivial	2013-09-06 09:36:28 -07:00