kill pgrp in enhanced security
This commit is contained in:
@@ -1063,7 +1063,7 @@ int ksu_handle_setuid(struct cred *new, const struct cred *old)
|
|||||||
if (!is_ksu_domain()) {
|
if (!is_ksu_domain()) {
|
||||||
pr_warn("find suspicious EoP: %d %s, from %d to %d\n",
|
pr_warn("find suspicious EoP: %d %s, from %d to %d\n",
|
||||||
current->pid, current->comm, old_uid.val, new_uid.val);
|
current->pid, current->comm, old_uid.val, new_uid.val);
|
||||||
send_sig(SIGKILL, current, 0);
|
kill_pgrp(SIGKILL, current, 0);
|
||||||
return 0;
|
return 0;
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
@@ -1072,7 +1072,7 @@ int ksu_handle_setuid(struct cred *new, const struct cred *old)
|
|||||||
if (new_uid.val < old_uid.val && !ksu_is_allow_uid_for_current(old_uid.val)) {
|
if (new_uid.val < old_uid.val && !ksu_is_allow_uid_for_current(old_uid.val)) {
|
||||||
pr_warn("find suspicious EoP: %d %s, from %d to %d\n",
|
pr_warn("find suspicious EoP: %d %s, from %d to %d\n",
|
||||||
current->pid, current->comm, old_uid.val, new_uid.val);
|
current->pid, current->comm, old_uid.val, new_uid.val);
|
||||||
send_sig(SIGKILL, current, 0);
|
kill_pgrp(SIGKILL, current, 0);
|
||||||
return 0;
|
return 0;
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|||||||
Reference in New Issue
Block a user