file capabilities: allow sigcont within session

Fix http://bugzilla.kernel.org/show_bug.cgi?id=9247

Allow sigcont to be sent to a process with greater capabilities if it is in
the same session.  Otherwise, a shell from which I've started a root shell
and done 'suspend' can't be restarted by the parent shell.

Also don't do file-capabilities signaling checks when uids for the
processes don't match, since the standard check_kill_permission will have
done those checks.

[[email protected]: coding-style cleanups]
Signed-off-by: Serge E. Hallyn <[email protected]>
Acked-by: Andrew Morgan <[email protected]>
Cc: Chris Wright <[email protected]>
Tested-by: "Theodore Ts'o" <[email protected]>
Cc: Stephen Smalley <[email protected]>
Cc: "Rafael J. Wysocki" <[email protected]>
Cc: Chris Wright <[email protected]>
Cc: James Morris <[email protected]>
Cc: Stephen Smalley <[email protected]>
Signed-off-by: Andrew Morton <[email protected]>
Signed-off-by: Linus Torvalds <[email protected]>

0 files changed, 0 insertions, 0 deletions