class CapsExecTest_UnprivilegedPtraceIgnoresFileCapabilities_Test
Defined at line 1706 of file ../../src/starnix/tests/syscalls/cpp/capabilities_test.cc
From
<https
://man7.org/linux/man-pages/man7/capabilities.7.html>:
The kernel recognizes a file which has the file effective bit set as
capability-dumb [...]. If the process did not obtain the full set of file
permitted capabilities, then execve(2) fails with the error EPERM.
From
<https
://man7.org/linux/man-pages/man2/execve.2.html>:
The set-user-ID and set-group-ID mode bits of a program are ignored
if any of the following is true:
[...]
• the process is being traced, the tracer does not have the
CAP_SYS_PTRACE capability in the user namespace of the
tracee's process [...].
The capabilities of the program file (see capabilities(7)) are also
ignored if any of the above are true.
Observed:
When traced without CAP_SYS_PTRACE, rather than treating file capabilities
as empty or failing with EPERM, execve(2) intersects P'(permitted) with
P(permitted), retaining file capabilities already held by the tracee while
masking out unheld file capabilities.
Public Methods
void CapsExecTest_UnprivilegedPtraceIgnoresFileCapabilities_Test ()
Defined at line 1706 of file ../../src/starnix/tests/syscalls/cpp/capabilities_test.cc
void CapsExecTest_UnprivilegedPtraceIgnoresFileCapabilities_Test (const CapsExecTest_UnprivilegedPtraceIgnoresFileCapabilities_Test & )
Defined at line 1706 of file ../../src/starnix/tests/syscalls/cpp/capabilities_test.cc
void CapsExecTest_UnprivilegedPtraceIgnoresFileCapabilities_Test (CapsExecTest_UnprivilegedPtraceIgnoresFileCapabilities_Test && )
Defined at line 1706 of file ../../src/starnix/tests/syscalls/cpp/capabilities_test.cc
CapsExecTest_UnprivilegedPtraceIgnoresFileCapabilities_Test & operator= (const CapsExecTest_UnprivilegedPtraceIgnoresFileCapabilities_Test & )
Defined at line 1706 of file ../../src/starnix/tests/syscalls/cpp/capabilities_test.cc
CapsExecTest_UnprivilegedPtraceIgnoresFileCapabilities_Test & operator= (CapsExecTest_UnprivilegedPtraceIgnoresFileCapabilities_Test && )
Defined at line 1706 of file ../../src/starnix/tests/syscalls/cpp/capabilities_test.cc
void ~CapsExecTest_UnprivilegedPtraceIgnoresFileCapabilities_Test ()
Defined at line 1706 of file ../../src/starnix/tests/syscalls/cpp/capabilities_test.cc