--- kernel/signal.c

+++ kernel/signal.c

@@ -2353,7 +2353,7 @@ SYSCALL_DEFINE3(rt_sigqueueinfo, pid_t,

/* Not even root can pretend to send signals from the kernel.

* Nor can they impersonate a kill()/tgkill(), which adds source info.

*/

- if (info.si_code != SI_QUEUE) {

+ if (info.si_code >= 0 || info.si_code == SI_TKILL) {

/* We used to allow any < 0 si_code */

WARN_ON_ONCE(info.si_code < 0);

return -EPERM;

@@ -2373,7 +2373,7 @@ long do_rt_tgsigqueueinfo(pid_t tgid, pi

/* Not even root can pretend to send signals from the kernel.

* Nor can they impersonate a kill()/tgkill(), which adds source info.

*/

- if (info->si_code != SI_QUEUE) {

+ if (info->si_code >= 0 || info->si_code == SI_TKILL) {

/* We used to allow any < 0 si_code */

WARN_ON_ONCE(info->si_code < 0);

return -EPERM;