| commit | 5bfd6eed29403424ee61129d9d54071cd2df55bc | [log] [tgz] |
|---|---|---|
| author | Kees Cook <keescook@chromium.org> | Fri Oct 26 14:42:58 2012 -0700 |
| committer | Kees Cook <keescook@chromium.org> | Sun Oct 02 21:57:39 2016 -0700 |
| tree | 1263b1495e0db5c785a2fff86b4296beb990526a | |
| parent | c8d2bc9bc39ebea8437fd974fdbc21847bb897a3 [diff] |
Yama: enable link restrictions when selected
Systems running with Yama enabled expect restrictions on various
potentially dangerous operations that could create backward-compaibility
issues with rare userspace corner-cases. Since 561ec64ae67e ("VFS:
don't do protected {sym,hard}links by default") has disabled VFS link
restrictions by default, enable them for systems using Yama.
Cc: stable@vger.kernel.org # v3.6
Signed-off-by: Kees Cook <keescook@chromium.org>