From mboxrd@z Thu Jan  1 00:00:00 1970
From: Alan Cox <alan@linux.intel.com>
Subject: Re: [PATCH v2] fs: introduce pipe-only dump mode suid_dumpable=3
Date: Fri, 22 Jun 2012 12:56:19 +0100
Message-ID: <20120622125619.28b36311@bob.linux.org.uk>
References: <20120622000049.GA7877@www.outflux.net>
Mime-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Cc: linux-kernel@vger.kernel.org, Rob Landley <rob@landley.net>,
	Alexander Viro <viro@zeniv.linux.org.uk>,
	Marcel Holtmann <marcel@holtmann.org>,
	Doug Ledford <dledford@redhat.com>,
	Andrew Morton <akpm@linux-foundation.org>,
	Serge Hallyn <serge.hallyn@canonical.com>,
	Joe Korty <joe.korty@ccur.com>,
	"Eric W. Biederman" <ebiederm@xmission.com>,
	David Howells <dhowells@redhat.com>,
	James Morris <james.l.morris@oracle.com>,
	linux-doc@vger.kernel.org, linux-fsdevel@vger.kernel.org
To: Kees Cook <keescook@chromium.org>
Return-path: <linux-doc-owner@vger.kernel.org>
In-Reply-To: <20120622000049.GA7877@www.outflux.net>
Sender: linux-doc-owner@vger.kernel.org
List-Id: linux-fsdevel.vger.kernel.org

> This patch introduces suid_dumpable=3 to allow privilege-changed
> processes to be dumped only to a pipe handler (and not directly to
> disk). The value of suid_dumpable=2 is now deprecated, and attempting
> to set this sysctl value returns -EINVAL.
> 
> Signed-off-by: Kees Cook <keescook@chromium.org>

Acked-by: Alan Cox <alan@linux.intel.com>