The cred_prepared bprm flag has a misleading name. It has nothing to do with the bprm_prepare_cred hook, and actually tracks if bprm_set_creds has been called. Rename this flag and improve its comment. Cc: David Howells <dhowells@redhat.com> Cc: Stephen Smalley <sds@tycho.nsa.gov> Cc: Casey Schaufler <casey@schaufler-ca.com> Signed-off-by: Kees Cook <keescook@chromium.org> Acked-by: John Johansen <john.johansen@canonical.com> Acked-by: James Morris <james.l.morris@oracle.com> Acked-by: Paul Moore <paul@paul-moore.com> Acked-by: Serge Hallyn <serge@hallyn.com> |
||
---|---|---|
.. | ||
policy | ||
.gitignore | ||
Kconfig | ||
Makefile | ||
audit.c | ||
common.c | ||
common.h | ||
condition.c | ||
domain.c | ||
environ.c | ||
file.c | ||
gc.c | ||
group.c | ||
load_policy.c | ||
memory.c | ||
mount.c | ||
network.c | ||
realpath.c | ||
securityfs_if.c | ||
tomoyo.c | ||
util.c |