Eric W. Biederman 1fc3444cda cgroup-v1: Require capabilities to set release_agent ... commit 24f6008564183aa120d07c03d9289519c2fe02af upstream. The cgroup release_agent is called with call_usermodehelper. The function call_usermodehelper starts the release_agent with a full set fo capabilities. Therefore require capabilities when setting the release_agaent. Reported-by: Tabitha Sable <tabitha.c.sable@gmail.com> Tested-by: Tabitha Sable <tabitha.c.sable@gmail.com> Fixes: 81a6a5cdd2 ("Task Control Groups: automatic userspace notification of idle cgroups") Cc: stable@vger.kernel.org # v2.6.24+ Signed-off-by: "Eric W. Biederman" <ebiederm@xmission.com> Signed-off-by: Tejun Heo <tj@kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2022-02-05 12:37:55 +01:00
..
cgroup-internal.h	fs_parse: fold fs_parameter_desc/fs_parameter_spec	2020-02-07 14:48:37 -05:00
cgroup-v1.c	cgroup-v1: Require capabilities to set release_agent	2022-02-05 12:37:55 +01:00
cgroup.c	psi: Fix uaf issue when psi trigger is destroyed while being polled	2022-02-05 12:37:55 +01:00
cpuset.c	cgroup/cpuset: Fix violation of cpuset locking rule	2021-09-15 09:50:38 +02:00
debug.c	kernel: cgroup: fix misuse of %x	2019-05-06 08:47:48 -07:00
freezer.c	cgroup: freezer: don't change task and cgroups status unnecessarily	2019-11-07 07:38:41 -08:00
legacy_freezer.c	cgroup: rename freezer.c into legacy_freezer.c	2019-04-19 11:26:48 -07:00
Makefile	cgroup: cgroup v2 freezer	2019-04-19 11:26:48 -07:00
namespace.c	nsproxy: add struct nsset	2020-05-09 13:57:12 +02:00
pids.c	clone3: allow spawning processes into cgroups	2020-02-12 17:57:51 -05:00
rdma.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 451	2019-06-19 17:09:08 +02:00
rstat.c	cgroup: Fix rootcg cpu.stat guest double counting	2021-11-18 14:04:13 +01:00