From: Andy Lutomirski <luto@amacapital.net>
Date: Thu, 5 Jul 2012 18:23:24 +0000 (-0700)
Subject: security: Minor improvements to no_new_privs documentation
X-Git-Tag: v3.5-rc6~1^2
X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=c540521bba5d2f24bd2c0417157bfaf8b85e2eee;p=pandora-kernel.git

security: Minor improvements to no_new_privs documentation

The documentation didn't actually mention how to enable no_new_privs.
This also adds a note about possible interactions between
no_new_privs and LSMs (i.e. why teaching systemd to set no_new_privs
is not necessarily a good idea), and it references the new docs
from include/linux/prctl.h.

Suggested-by: Rob Landley <rob@landley.net>
Signed-off-by: Andy Lutomirski <luto@amacapital.net>
Acked-by: Kees Cook <keescook@chromium.org>
Signed-off-by: James Morris <james.l.morris@oracle.com>
---

Reading git-diff-tree failed