Messages in this thread | | | Date | Wed, 8 Dec 2010 09:53:16 -0800 | From | Kees Cook <> | Subject | Re: [PATCH] syslog: check cap_syslog when dmesg_restrict |
| |
On Wed, Dec 08, 2010 at 03:19:01PM +0000, Serge E. Hallyn wrote: > Eric Paris pointed out that it doesn't make sense to require > both CAP_SYS_ADMIN and CAP_SYSLOG for certain syslog actions. > So require CAP_SYSLOG, not CAP_SYS_ADMIN, when dmesg_restrict > is set. > > (I'm also consolidating the now common error path) > > Signed-off-by: Serge E. Hallyn <serge.hallyn@canonical.com>
Acked-by: Kees Cook <kees.cook@canonical.com>
-- Kees Cook Ubuntu Security Team
| |