Messages in this thread | | | Date | Wed, 04 Apr 2012 21:07:03 +0200 | From | Richard Weinberger <> | Subject | Re: [PATCH] sysctl: fix write access to dmesg_restrict/kptr_restrict |
| |
On 04.04.2012 20:40, Kees Cook wrote: > Commit bfdc0b4 adds code to restrict access to dmesg_restrict, > however, it incorrectly alters kptr_restrict rather than > dmesg_restrict. > > The original patch from Richard Weinberger > (https://lkml.org/lkml/2011/3/14/362) alters dmesg_restrict as > expected, and so the patch seems to have been misapplied. > > This adds the CAP_SYS_ADMIN check to both dmesg_restrict and > kptr_restrict, since both are sensitive. > > Reported-by: Phillip Lougher<plougher@redhat.com> > Signed-off-by: Kees Cook<keescook@chromium.org> > Cc: stable@vger.kernel.org
Acked-by: Richard Weinberger <richard@nod.at>
Thanks, //richard
| |