aboutsummaryrefslogtreecommitdiffstats
path: root/fs/exec.c
diff options
context:
space:
mode:
Diffstat (limited to 'fs/exec.c')
-rw-r--r--fs/exec.c14
1 files changed, 11 insertions, 3 deletions
diff --git a/fs/exec.c b/fs/exec.c
index d9576f261815..842d5700c155 100644
--- a/fs/exec.c
+++ b/fs/exec.c
@@ -1114,6 +1114,13 @@ out:
1114} 1114}
1115EXPORT_SYMBOL(flush_old_exec); 1115EXPORT_SYMBOL(flush_old_exec);
1116 1116
1117void would_dump(struct linux_binprm *bprm, struct file *file)
1118{
1119 if (inode_permission(file->f_path.dentry->d_inode, MAY_READ) < 0)
1120 bprm->interp_flags |= BINPRM_FLAGS_ENFORCE_NONDUMP;
1121}
1122EXPORT_SYMBOL(would_dump);
1123
1117void setup_new_exec(struct linux_binprm * bprm) 1124void setup_new_exec(struct linux_binprm * bprm)
1118{ 1125{
1119 int i, ch; 1126 int i, ch;
@@ -1153,9 +1160,10 @@ void setup_new_exec(struct linux_binprm * bprm)
1153 if (bprm->cred->uid != current_euid() || 1160 if (bprm->cred->uid != current_euid() ||
1154 bprm->cred->gid != current_egid()) { 1161 bprm->cred->gid != current_egid()) {
1155 current->pdeath_signal = 0; 1162 current->pdeath_signal = 0;
1156 } else if (file_permission(bprm->file, MAY_READ) || 1163 } else {
1157 bprm->interp_flags & BINPRM_FLAGS_ENFORCE_NONDUMP) { 1164 would_dump(bprm, bprm->file);
1158 set_dumpable(current->mm, suid_dumpable); 1165 if (bprm->interp_flags & BINPRM_FLAGS_ENFORCE_NONDUMP)
1166 set_dumpable(current->mm, suid_dumpable);
1159 } 1167 }
1160 1168
1161 /* 1169 /*