tree 757293c98c93eec1c5b7caae149c34e49bb824c5
parent 4fed655c410cc56add64c7b1f7c85c7c56066ac2
author Eric W. Biederman <ebiederm@xmission.com> 1417821567 -0600
committer Eric W. Biederman <ebiederm@xmission.com> 1417821567 -0600

groups: Consolidate the setgroups permission checks

Today there are 3 instances of setgroups and due to an oversight their
permission checking has diverged.  Add a common function so that
they may all share the same permission checking code.

This corrects the current oversight in the current permission checks
and adds a helper to avoid this in the future.

A user namespace security fix will update this new helper, shortly.

Cc: stable@vger.kernel.org
Signed-off-by: "Eric W. Biederman" <ebiederm@xmission.com>