Messages in this thread | | | From | Andreas Gruenbacher <> | Subject | Re: [RFC][PATCH 0/2] Correct behavior for listxattr and 'trusted' xattrs | Date | Wed, 10 Mar 2010 12:48:48 +0100 |
| |
On Wednesday 03 March 2010 14:02:58 Stephen Smalley wrote: > Should it be using has_capability_noaudit() rather than capable() so > that merely calling listxattr() on a file that happens to have trusted > xattrs does not set PF_SUPERPRIV on the task and does not trigger an > audit message?
Yes, makes sense. A version of has_capability_noaudit() without an explicit task parameter, like security_capable(), would be better still.
Thanks, Andreas
| |