CONFIG_SECURITY_SAFESETID: Gate setid transitions to limit CAP_SET{U/G}ID capabilities

General informations

The Linux kernel configuration item CONFIG_SECURITY_SAFESETID:

• prompt: Gate setid transitions to limit CAP_SET{U/G}ID capabilities
• type: bool
• depends on: CONFIG_SECURITY
• defined in security/safesetid/Kconfig
• found in Linux kernels: 5.1–5.19, 6.0–6.8, 6.9-rc+HEAD

Help text

SafeSetID is an LSM module that gates the setid family of syscalls to restrict UID/GID transitions from a given UID/GID to only those approved by a system-wide whitelist. These restrictions also prohibit the given UIDs/GIDs from obtaining auxiliary privileges associated with CAP_SET{U/G}ID, such as allowing a user to set up user namespace UID mappings.

If you are unsure how to answer this question, answer N.

Hardware

LKDDb

Raw data from LKDDb:

• (none)

Sources

This page is automaticly generated with free (libre, open) software lkddb(see lkddb-sources).

The data is retrived from:

• Linux kernel
• Linux Kernel Driver DataBase (LKDDb)

Automatic links from Google (and ads)

Custom Search

Popular queries: