packages: kernel/kernel-grsec_fixes.patch - leave rsbac check

arekm arekm at pld-linux.org
Tue Jul 6 14:56:22 CEST 2010


Author: arekm                        Date: Tue Jul  6 12:56:22 2010 GMT
Module: packages                      Tag: HEAD
---- Log message:
- leave rsbac check

---- Files affected:
packages/kernel:
   kernel-grsec_fixes.patch (1.9 -> 1.10) 

---- Diffs:

================================================================
Index: packages/kernel/kernel-grsec_fixes.patch
diff -u packages/kernel/kernel-grsec_fixes.patch:1.9 packages/kernel/kernel-grsec_fixes.patch:1.10
--- packages/kernel/kernel-grsec_fixes.patch:1.9	Tue Jul  6 14:53:42 2010
+++ packages/kernel/kernel-grsec_fixes.patch	Tue Jul  6 14:56:16 2010
@@ -3,7 +3,7 @@
 diff -upr a/grsecurity/gracl_cap.c c/grsecurity/gracl_cap.c
 --- a/grsecurity/gracl_cap.c	2007-12-01 00:54:57.312774500 +0000
 +++ c/grsecurity/gracl_cap.c	2007-12-01 01:09:34.923621750 +0000
-@@ -110,3 +110,19 @@ gr_is_capable_nolog(const int cap)
+@@ -110,2 +110,2 @@ gr_is_capable_nolog(const int cap)
  	return 0;
  }
 
@@ -174,18 +174,12 @@
  }
 --- linux-2.6.34/net/socket.c~	2010-07-06 13:40:05.892545375 +0200
 +++ linux-2.6.34/net/socket.c	2010-07-06 14:53:01.074608654 +0200
-@@ -1573,18 +1573,6 @@
+@@ -1573,12 +1573,6 @@
  	newsock->type = sock->type;
  	newsock->ops = sock->ops;
  
 -	if (gr_handle_sock_server_other(sock->sk)) {
 -		err = -EPERM;
--		sock_release(newsock);
--		goto out_put;
--	}
--
--	err = gr_search_accept(sock);
--	if (err) {
 -		sock_release(newsock);
 -		goto out_put;
 -	}
================================================================

---- CVS-web:
    http://cvs.pld-linux.org/cgi-bin/cvsweb.cgi/packages/kernel/kernel-grsec_fixes.patch?r1=1.9&r2=1.10&f=u



More information about the pld-cvs-commit mailing list