kumajaya/android_kernel_samsung_espresso10 — pull request #1 by codyf86 (2013-08-30 00:13:04+00:00)
Title: Add PR_{GET,SET}_NO_NEW_PRIVS to prevent execve from granting privs

With this set, a lot of dangerous operations (chroot, unshare, etc)
become a lot less dangerous because there is no possibility of
subverting privileged binaries.

author:	Andy Lutomirski
https://git.kernel.org/cgit/linux/kernel/git/luto/linux.git/commit/?id=7102b0e278af50d27b5d61d1be5faaba1b0a091e