diff options
Diffstat (limited to 'kernel/sched.c')
-rw-r--r-- | kernel/sched.c | 9 |
1 files changed, 6 insertions, 3 deletions
diff --git a/kernel/sched.c b/kernel/sched.c index a172494a9a63..480adeb63f8f 100644 --- a/kernel/sched.c +++ b/kernel/sched.c | |||
@@ -4892,8 +4892,11 @@ static bool check_same_owner(struct task_struct *p) | |||
4892 | 4892 | ||
4893 | rcu_read_lock(); | 4893 | rcu_read_lock(); |
4894 | pcred = __task_cred(p); | 4894 | pcred = __task_cred(p); |
4895 | match = (cred->euid == pcred->euid || | 4895 | if (cred->user->user_ns == pcred->user->user_ns) |
4896 | cred->euid == pcred->uid); | 4896 | match = (cred->euid == pcred->euid || |
4897 | cred->euid == pcred->uid); | ||
4898 | else | ||
4899 | match = false; | ||
4897 | rcu_read_unlock(); | 4900 | rcu_read_unlock(); |
4898 | return match; | 4901 | return match; |
4899 | } | 4902 | } |
@@ -5221,7 +5224,7 @@ long sched_setaffinity(pid_t pid, const struct cpumask *in_mask) | |||
5221 | goto out_free_cpus_allowed; | 5224 | goto out_free_cpus_allowed; |
5222 | } | 5225 | } |
5223 | retval = -EPERM; | 5226 | retval = -EPERM; |
5224 | if (!check_same_owner(p) && !capable(CAP_SYS_NICE)) | 5227 | if (!check_same_owner(p) && !task_ns_capable(p, CAP_SYS_NICE)) |
5225 | goto out_unlock; | 5228 | goto out_unlock; |
5226 | 5229 | ||
5227 | retval = security_task_setscheduler(p); | 5230 | retval = security_task_setscheduler(p); |