[linux-yocto] [PATCH 0/3] Backport Capabilities Patches to 4.1

[Saul Wold]

On Tue, 2016-02-16 at 09:38 -0500, Bruce Ashfield wrote:
> On 16-02-11 11:16 AM, Saul Wold wrote:
> > 
> > Add the Capabilities support that some projects would like to use
> > in the linux-yocto-4.1 kernel.
> > 
> > These 3 are all upstream in 4.3 or later
> 
> I've staged the patches, and pushed them out. SRCREV updates to
> follow
> shortly (preferably after the 4.4 issues with PAT are sorted out).
> 
I am also working on the final set of Galileo Gen2 patches that are not
backportes, doing build and test currently.

Sau!

> Bruce
> 
> > 
> > Thanks
> >     Sau!
> > 
> > 
> > Andy Lutomirski (3):
> >    capabilities: ambient capabilities
> >    selftests/capabilities: Add tests for capability evolution
> >    capabilities: add a securebit to disable PR_CAP_AMBIENT_RAISE
> > 
> >   fs/proc/array.c                                    |   5 +-
> >   include/linux/cred.h                               |   8 +
> >   include/uapi/linux/prctl.h                         |   7 +
> >   include/uapi/linux/securebits.h                    |  11 +-
> >   kernel/user_namespace.c                            |   1 +
> >   security/commoncap.c                               | 103 ++++-
> >   security/keys/process_keys.c                       |   1 +
> >   tools/testing/selftests/capabilities/.gitignore    |   2 +
> >   tools/testing/selftests/capabilities/Makefile      |  18 +
> >   tools/testing/selftests/capabilities/test_execve.c | 427
> > +++++++++++++++++++++
> >   .../testing/selftests/capabilities/validate_cap.c  |  73 ++++
> >   11 files changed, 644 insertions(+), 12 deletions(-)
> >   create mode 100644
> > tools/testing/selftests/capabilities/.gitignore
> >   create mode 100644 tools/testing/selftests/capabilities/Makefile
> >   create mode 100644
> > tools/testing/selftests/capabilities/test_execve.c
> >   create mode 100644
> > tools/testing/selftests/capabilities/validate_cap.c
> > 
>