--- linux-2.6.16-gentoo-r12/fs/proc/base.c +++ linux-2.6.16-gentoo-r12/fs/proc/base.c @@ -1367,6 +1367,7 @@ static int pid_revalidate(struct dentry inode->i_uid = 0; inode->i_gid = 0; } + inode->i_mode &= ~(S_ISUID | S_ISGID); security_task_to_inode(task, inode); return 1; } @@ -1394,6 +1395,7 @@ static int tid_fd_revalidate(struct dent inode->i_uid = 0; inode->i_gid = 0; } + inode->i_mode &= ~(S_ISUID | S_ISGID); security_task_to_inode(task, inode); return 1; }