diff options
author | Linus Torvalds <torvalds@linux-foundation.org> | 2013-06-29 17:26:50 (GMT) |
---|---|---|
committer | Linus Torvalds <torvalds@linux-foundation.org> | 2013-06-29 17:26:50 (GMT) |
commit | 82d0b80ad6346cee3200b7c7bb1fc975481b7703 (patch) | |
tree | a1e8b5ac321e1f46c389549f3b978a7681feb631 | |
parent | 98b6ed0f2bf4abfb759206aa70690636372bdee7 (diff) | |
parent | 2976b10f05bd7f6dab9f9e7524451ddfed656a89 (diff) | |
download | linux-82d0b80ad6346cee3200b7c7bb1fc975481b7703.tar.xz |
Merge branch 'perf-urgent-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip
Pull perf fix from Ingo Molnar:
"One more fix for a recently discovered bug"
* 'perf-urgent-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
perf: Disable monitoring on setuid processes for regular users
-rw-r--r-- | fs/exec.c | 16 |
1 files changed, 9 insertions, 7 deletions
@@ -1135,13 +1135,6 @@ void setup_new_exec(struct linux_binprm * bprm) set_dumpable(current->mm, suid_dumpable); } - /* - * Flush performance counters when crossing a - * security domain: - */ - if (!get_dumpable(current->mm)) - perf_event_exit_task(current); - /* An exec changes our domain. We are no longer part of the thread group */ @@ -1205,6 +1198,15 @@ void install_exec_creds(struct linux_binprm *bprm) commit_creds(bprm->cred); bprm->cred = NULL; + + /* + * Disable monitoring for regular users + * when executing setuid binaries. Must + * wait until new credentials are committed + * by commit_creds() above + */ + if (get_dumpable(current->mm) != SUID_DUMP_USER) + perf_event_exit_task(current); /* * cred_guard_mutex must be held at least to this point to prevent * ptrace_attach() from altering our determination of the task's |