capabilities: do not drop CAP_SETPCAP from the initial task
authorEric Paris <eparis@redhat.com>
Fri, 1 Apr 2011 21:08:34 +0000 (17:08 -0400)
committerJames Morris <jmorris@namei.org>
Mon, 4 Apr 2011 00:31:09 +0000 (10:31 +1000)
commitffa8e59df047d57e812a04f7d6baf6a25c652c0c
tree099fc879024f151ff5bc400763477f1bb0ffa254
parent4bf2ea77dba76a22f49db3c10773896aaeeb8f66
capabilities: do not drop CAP_SETPCAP from the initial task

In olden' days of yore CAP_SETPCAP had special meaning for the init task.
We actually have code to make sure that CAP_SETPCAP wasn't in pE of things
using the init_cred.  But CAP_SETPCAP isn't so special any more and we
don't have a reason to special case dropping it for init or kthreads....

Signed-off-by: Eric Paris <eparis@redhat.com>
Acked-by: Andrew G. Morgan <morgan@kernel.org>
Signed-off-by: James Morris <jmorris@namei.org>
include/linux/capability.h
kernel/capability.c