[linux-yocto] [PATCH 0/3] Backport Capabilities Patches to 4.1

Bruce Ashfield bruce.ashfield at windriver.com
Tue Feb 16 06:38:26 PST 2016


On 16-02-11 11:16 AM, Saul Wold wrote:
>
> Add the Capabilities support that some projects would like to use
> in the linux-yocto-4.1 kernel.
>
> These 3 are all upstream in 4.3 or later

I've staged the patches, and pushed them out. SRCREV updates to follow
shortly (preferably after the 4.4 issues with PAT are sorted out).

Bruce

>
> Thanks
>     Sau!
>
>
> Andy Lutomirski (3):
>    capabilities: ambient capabilities
>    selftests/capabilities: Add tests for capability evolution
>    capabilities: add a securebit to disable PR_CAP_AMBIENT_RAISE
>
>   fs/proc/array.c                                    |   5 +-
>   include/linux/cred.h                               |   8 +
>   include/uapi/linux/prctl.h                         |   7 +
>   include/uapi/linux/securebits.h                    |  11 +-
>   kernel/user_namespace.c                            |   1 +
>   security/commoncap.c                               | 103 ++++-
>   security/keys/process_keys.c                       |   1 +
>   tools/testing/selftests/capabilities/.gitignore    |   2 +
>   tools/testing/selftests/capabilities/Makefile      |  18 +
>   tools/testing/selftests/capabilities/test_execve.c | 427 +++++++++++++++++++++
>   .../testing/selftests/capabilities/validate_cap.c  |  73 ++++
>   11 files changed, 644 insertions(+), 12 deletions(-)
>   create mode 100644 tools/testing/selftests/capabilities/.gitignore
>   create mode 100644 tools/testing/selftests/capabilities/Makefile
>   create mode 100644 tools/testing/selftests/capabilities/test_execve.c
>   create mode 100644 tools/testing/selftests/capabilities/validate_cap.c
>



More information about the linux-yocto mailing list