diff options
| author | Kees Cook <keescook@chromium.org> | 2020-07-03 10:44:22 -0700 |
|---|---|---|
| committer | Jonathan Corbet <corbet@lwn.net> | 2020-07-05 14:04:45 -0600 |
| commit | 7303515ae488ce767d3155358bae505dabd9ebe1 (patch) | |
| tree | 3dc0035777144d17213d56a2115a6c6e77c5e6d8 /tools/perf/scripts/python/bin | |
| parent | Documentation/admin-guide: xfs: drop doubled word (diff) | |
| download | linux-7303515ae488ce767d3155358bae505dabd9ebe1.tar.gz linux-7303515ae488ce767d3155358bae505dabd9ebe1.zip | |
Documentation: Clarify f_cred vs current_cred() use
When making access control choices from a file-based context, f_cred
must be used instead of current_cred() to avoid confused deputy attacks
where an open file may get passed to a more privileged process. Add a
short paragraph to explicitly state the rationale.
Cc: Jonathan Corbet <corbet@lwn.net>
Cc: linux-doc@vger.kernel.org
Signed-off-by: Kees Cook <keescook@chromium.org>
Link: https://lore.kernel.org/r/202007031038.8833A35DE4@keescook
Signed-off-by: Jonathan Corbet <corbet@lwn.net>
Diffstat (limited to 'tools/perf/scripts/python/bin')
0 files changed, 0 insertions, 0 deletions