Navigation: Linux Kernel Driver DataBase - web LKDDB: Main index - S index

CONFIG_SECURITY_SAFESETID: Gate setid transitions to limit CAP_SET{U/G}ID capabilities

General informations

The Linux kernel configuration item CONFIG_SECURITY_SAFESETID:

Help text

SafeSetID is an LSM module that gates the setid family of syscalls to restrict UID/GID transitions from a given UID/GID to only those approved by a system-wide whitelist. These restrictions also prohibit the given UIDs/GIDs from obtaining auxiliary privileges associated with CAP_SET{U/G}ID, such as allowing a user to set up user namespace UID mappings.

If you are unsure how to answer this question, answer N.



Raw data from LKDDb:


This page is automaticly generated with free (libre, open) software lkddb(see lkddb-sources).

The data is retrived from:

Automatic links from Google (and ads)

Custom Search

Popular queries:

Navigation: Linux Kernel Driver DataBase - web LKDDB: main index - S index

Automatically generated (in year 2020). See also LKDDb sources on GitLab