Messages in this thread | | | From | Kees Cook <> | Subject | [PATCH 0/2] pstore: Make default pstorefs root dir perms 0750 | Date | Thu, 10 Aug 2017 13:36:33 -0700 |
| |
Nick Kralevich pointed out that it was rather problematic to check capabilities when reading some pstore files. Instead, opt for a more configurable DAC approach, but retain the general protection by making the pstorefs root directory mode 0750. It was 0755, but most crash-handlers will also be performing unlink operations (which DAC would require a root uid perm for already), so this shouldn't affect anyone, but rather make permissions more flexible.
-Kees
| |