From: Eric Paris Date: Fri, 24 May 2013 13:18:04 +0000 (-0400) Subject: audit: audit feature to only allow unsetting the loginuid X-Git-Tag: v3.13-rc1~19^2~15 X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=d040e5af380554c23ffe0a034ae5f3e53da93a1d;p=pandora-kernel.git audit: audit feature to only allow unsetting the loginuid This is a new audit feature which only grants processes with CAP_AUDIT_CONTROL the ability to unset their loginuid. They cannot directly set it from a valid uid to another valid uid. The ability to unset the loginuid is nice because a priviledged task, like that of container creation, can unset the loginuid and then priv is not needed inside the container when a login daemon needs to set the loginuid. Signed-off-by: Eric Paris Signed-off-by: Richard Guy Briggs Signed-off-by: Eric Paris --- Reading git-diff-tree failed