Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
Pull security layer fixlet from James Morris. * 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security: sysctl: fix write access to dmesg_restrict/kptr_restrict
This commit is contained in:
Коммит
d6a624eef1
|
@ -170,7 +170,7 @@ static int proc_taint(struct ctl_table *table, int write,
|
|||
#endif
|
||||
|
||||
#ifdef CONFIG_PRINTK
|
||||
static int proc_dmesg_restrict(struct ctl_table *table, int write,
|
||||
static int proc_dointvec_minmax_sysadmin(struct ctl_table *table, int write,
|
||||
void __user *buffer, size_t *lenp, loff_t *ppos);
|
||||
#endif
|
||||
|
||||
|
@ -703,7 +703,7 @@ static struct ctl_table kern_table[] = {
|
|||
.data = &dmesg_restrict,
|
||||
.maxlen = sizeof(int),
|
||||
.mode = 0644,
|
||||
.proc_handler = proc_dointvec_minmax,
|
||||
.proc_handler = proc_dointvec_minmax_sysadmin,
|
||||
.extra1 = &zero,
|
||||
.extra2 = &one,
|
||||
},
|
||||
|
@ -712,7 +712,7 @@ static struct ctl_table kern_table[] = {
|
|||
.data = &kptr_restrict,
|
||||
.maxlen = sizeof(int),
|
||||
.mode = 0644,
|
||||
.proc_handler = proc_dmesg_restrict,
|
||||
.proc_handler = proc_dointvec_minmax_sysadmin,
|
||||
.extra1 = &zero,
|
||||
.extra2 = &two,
|
||||
},
|
||||
|
@ -1943,7 +1943,7 @@ static int proc_taint(struct ctl_table *table, int write,
|
|||
}
|
||||
|
||||
#ifdef CONFIG_PRINTK
|
||||
static int proc_dmesg_restrict(struct ctl_table *table, int write,
|
||||
static int proc_dointvec_minmax_sysadmin(struct ctl_table *table, int write,
|
||||
void __user *buffer, size_t *lenp, loff_t *ppos)
|
||||
{
|
||||
if (write && !capable(CAP_SYS_ADMIN))
|
||||
|
|
Загрузка…
Ссылка в новой задаче