Subject capabilities: close the ways around the CAP_SETFCAP rule for uid 0
Author josef@toxicpanda.com
Date 2026-10-14 20:47:46 +0000 UTC
Version
Cc brauner@kernel.org dhowells@redhat.com jarkko@kernel.org jmorris@namei.org josef@toxicpanda.com keyrings@vger.kernel.org linux-fsdevel@vger.kernel.org linux-kernel@vger.kernel.org linux-security-module@vger.kernel.org morgan@kernel.org paul@paul-moore.com serge@hallyn.com sergeh@kernel.org
Patches (5)
Name Content [All]
[PATCH v2 1/5] userns: record how far up CAP_SETFCAP reaches [Body]
[PATCH v2 2/5] userns: don't let setns() lend CAP_SETFCAP [Body]
[PATCH v2 3/5] userns: check the opener and the writer before mapping uid 0 [Body]
[PATCH v2 4/5] capabilities: limit fscaps to where CAP_SETFCAP reaches [Body]
[PATCH v2 5/5] capabilities: don't let ptrace borrow CAP_SETFCAP [Body]
Series Summary
waiting
Status: waiting
Sessions
Session 2026-10-14
waiting
ID (for dev) 323dca63-ffab-4ad5-9207-36aaa7cad521
Status waiting
Test Base Patched Verdict