Commit 2476d3c2 authored Jun 13, 2014 by Ruchi Kandoi Committed by John Stultz Feb 16, 2016

prctl: adds the capable(CAP_SYS_NICE) check to PR_SET_TIMERSLACK_PID.



Adds a capable() check to make sure that arbitary apps do not change the
timer slack for other apps.

Bug: 15000427
Change-Id: I558a2551a0e3579c7f7e7aae54b28aa9d982b209
Signed-off-by: Ruchi Kandoi <kandoiruchi@google.com>

parent f2902f90

kernel/sys.c

+3 −0

Original line number	Diff line number	Diff line
		@@ -2201,6 +2201,9 @@ SYSCALL_DEFINE5(prctl, int, option, unsigned long, arg2, unsigned long, arg3,
		return -EINVAL;
		break;
		case PR_SET_TIMERSLACK_PID:
		if (current->pid != (pid_t)arg3 &&
		!capable(CAP_SYS_NICE))
		return -EPERM;
		rcu_read_lock();
		tsk = find_task_by_pid_ns((pid_t)arg3, &init_pid_ns);
		if (tsk == NULL) {