diff options
| author | Kees Cook <keescook@chromium.org> | 2017-07-18 15:25:35 -0700 |
|---|---|---|
| committer | Kees Cook <keescook@chromium.org> | 2017-08-01 12:03:14 -0700 |
| commit | 64701dee4178eb4a771b8b36cd86560f5b0e2460 (patch) | |
| tree | 1a0012699f1c5ba4fb7909eb0db75aaf10168e7a /security/tomoyo/tomoyo.c | |
| parent | 473d89639db0aaa0799616b397584ba4f58cd8e1 (diff) | |
| download | op-kernel-dev-64701dee4178eb4a771b8b36cd86560f5b0e2460.zip op-kernel-dev-64701dee4178eb4a771b8b36cd86560f5b0e2460.tar.gz | |
exec: Use sane stack rlimit under secureexec
For a secureexec, before memory layout selection has happened, reset the
stack rlimit to something sane to avoid the caller having control over
the resulting layouts.
$ ulimit -s
8192
$ ulimit -s unlimited
$ /bin/sh -c 'ulimit -s'
unlimited
$ sudo /bin/sh -c 'ulimit -s'
8192
Cc: Linus Torvalds <torvalds@linux-foundation.org>
Signed-off-by: Kees Cook <keescook@chromium.org>
Reviewed-by: James Morris <james.l.morris@oracle.com>
Acked-by: Serge Hallyn <serge@hallyn.com>
Diffstat (limited to 'security/tomoyo/tomoyo.c')
0 files changed, 0 insertions, 0 deletions
