Bug#387668: linux-image-2.6.17-2-powerpc: any user can lower process priority

[Benoît Dejean <benoit@placenet.org>]

Package: linux-image-2.6.17-2-powerpc
Version: 2.6.17-9
Severity: normal

Hi,
	since i've upgraded to this kernel, ANY user can
setpriority his processes to lower priorities.


#include <sys/time.h>
#include <sys/resource.h>
#include <stdio.h>
#include <stdlib.h>
#include <unistd.h>
#include <sys/types.h>

int main()
{
	int priority;

	system("id");

	priority = getpriority(PRIO_PROCESS, getpid());

	printf("priority = %d\n", priority);

	if (setpriority(PRIO_PROCESS, getpid(), priority - 1) < 0)
		perror("setpriority");

	priority = getpriority(PRIO_PROCESS, getpid());

	printf("priority = %d\n", priority);

	return 0;
}

uid=1000(benoit) gid=1000(benoit) groupes=20(dialout),24(cdrom), \
	25(floppy),29(audio),44(video),46(plugdev),106(camera), \
	110(hal),116(fuse),118(scanner),1000(benoit)
priority = 0
priority = -1

debsums is OK on my kernel.


-- System Information:
Debian Release: testing/unstable
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: powerpc (ppc)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.17-2-powerpc
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8) (ignored: LC_ALL set to fr_FR.UTF-8)

Versions of packages linux-image-2.6.17-2-powerpc depends on:
ii  mkvmlinuz                     23         create a kernel to boot a PowerPC 
ii  module-init-tools             3.2.2-3    tools for managing Linux kernel mo
ii  yaird [linux-initramfs-tool]  0.0.12-18  Yet Another mkInitRD

linux-image-2.6.17-2-powerpc recommends no packages.

-- debconf information:
  shared/kernel-image/really-run-bootloader: true
  linux-image-2.6.17-2-powerpc/postinst/create-kimage-link-2.6.17-2-powerpc: true
  linux-image-2.6.17-2-powerpc/preinst/initrd-2.6.17-2-powerpc:
  linux-image-2.6.17-2-powerpc/preinst/lilo-initrd-2.6.17-2-powerpc: true
* linux-image-2.6.17-2-powerpc/preinst/already-running-this-2.6.17-2-powerpc:
  linux-image-2.6.17-2-powerpc/preinst/abort-overwrite-2.6.17-2-powerpc:
  linux-image-2.6.17-2-powerpc/prerm/removing-running-kernel-2.6.17-2-powerpc: true
  linux-image-2.6.17-2-powerpc/postinst/really-run-bootloader-2.6.17-2-powerpc: true
  linux-image-2.6.17-2-powerpc/preinst/elilo-initrd-2.6.17-2-powerpc: true
  linux-image-2.6.17-2-powerpc/postinst/depmod-error-2.6.17-2-powerpc: false
  linux-image-2.6.17-2-powerpc/postinst/kimage-is-a-directory:
  linux-image-2.6.17-2-powerpc/preinst/abort-install-2.6.17-2-powerpc:
  linux-image-2.6.17-2-powerpc/postinst/old-dir-initrd-link-2.6.17-2-powerpc: true
  linux-image-2.6.17-2-powerpc/postinst/old-system-map-link-2.6.17-2-powerpc: true
  linux-image-2.6.17-2-powerpc/postinst/bootloader-test-error-2.6.17-2-powerpc:
  linux-image-2.6.17-2-powerpc/preinst/overwriting-modules-2.6.17-2-powerpc: true
  linux-image-2.6.17-2-powerpc/postinst/bootloader-error-2.6.17-2-powerpc:
  linux-image-2.6.17-2-powerpc/preinst/bootloader-initrd-2.6.17-2-powerpc: true
  linux-image-2.6.17-2-powerpc/postinst/old-initrd-link-2.6.17-2-powerpc: true
  linux-image-2.6.17-2-powerpc/preinst/lilo-has-ramdisk:
  linux-image-2.6.17-2-powerpc/prerm/would-invalidate-boot-loader-2.6.17-2-powerpc: true
  linux-image-2.6.17-2-powerpc/preinst/failed-to-move-modules-2.6.17-2-powerpc:
  linux-image-2.6.17-2-powerpc/postinst/depmod-error-initrd-2.6.17-2-powerpc: false