/
usr
/
src
/
linux-headers-5.15.0-190
/
security
/
safesetid
/
/usr/src/linux-headers-5.15.0-190/security/safesetid
mkdir
upload
Name
Size
Mode
Actions
Kconfig
709
0644
edit
dl
rm
Makefile
156
0644
edit
dl
rm
Edit:
/usr/src/linux-headers-5.15.0-190/security/safesetid/Kconfig
(709B)
# SPDX-License-Identifier: GPL-2.0-only config SECURITY_SAFESETID bool "Gate setid transitions to limit CAP_SET{U/G}ID capabilities" depends on SECURITY select SECURITYFS default n help SafeSetID is an LSM module that gates the setid family of syscalls to restrict UID/GID transitions from a given UID/GID to only those approved by a system-wide whitelist. These restrictions also prohibit the given UIDs/GIDs from obtaining auxiliary privileges associated with CAP_SET{U/G}ID, such as allowing a user to set up user namespace UID mappings. If you are unsure how to answer this question, answer N.
Save
cmd:
run