Commit e10337da authored Apr 10, 2019 by Jann Horn Committed by Micah Morton Jul 15, 2019

LSM: SafeSetID: fix use of literal -1 in capable hook



The capable() hook returns an error number. -EPERM is actually the same as
-1, so this doesn't make a difference in behavior.

Signed-off-by: Jann Horn <jannh@google.com>
Signed-off-by: Micah Morton <mortonm@chromium.org>

parent 4f72123d

security/safesetid/lsm.c

+1 −1

Original line number	Diff line number	Diff line
		@@ -90,7 +90,7 @@ static int safesetid_security_capable(const struct cred *cred,
		*/
		pr_warn("Operation requires CAP_SETUID, which is not available to UID %u for operations besides approved set*uid transitions\n",
		__kuid_val(cred->uid));
		return -1;
		return -EPERM;
		}

		/*

Admin message