SELinux: clear parent death signal on SID transitions

4ac212ad · Stephen Smalley <[email protected]> · 2007-08-29 08:51:50 -04:00

Clear parent death signal on SID transitions to prevent unauthorized
signaling between SIDs.

Signed-off-by:  Stephen Smalley <[email protected]>
Acked-by: Eric Paris <[email protected]>
Signed-off-by: James Morris <[email protected]>

Commit: 4ac212ad4e8fafc22fa147fc255ff5fa5435cf33
Parents: a1c582d0

Changes

1 files changed · +3 −0

File	Status	Add	Del	Content
security/selinux/hooks.c	modified	+3	−0	View file

security/selinux/hooks.c

View file

diff --git a/security/selinux/hooks.c b/security/selinux/hooks.c
index d8bc417..3694662 100644
--- a/security/selinux/hooks.c
+++ b/security/selinux/hooks.c
@@ -1907,6 +1907,9 @@ static void selinux_bprm_post_apply_creds(struct linux_binprm *bprm)
 		spin_unlock_irq(&current->sighand->siglock);
 	}
 
+	/* Always clear parent death signal on SID transitions. */
+	current->pdeath_signal = 0;
+
 	/* Check whether the new SID can inherit resource limits
 	   from the old SID.  If not, reset all soft limits to
 	   the lower of the current task's hard limit and the init