Messages in this thread | | | Date | Thu, 29 Aug 2013 11:46:32 -0700 | From | "H. Peter Anvin" <> | Subject | Re: [PATCH 05/10] asus-wmi: Restrict debugfs interface when module loading is restricted |
| |
On 08/29/2013 11:35 AM, Matthew Garrett wrote: > On Thu, 2013-08-29 at 11:22 -0700, H. Peter Anvin wrote: >> On 08/19/2013 09:10 AM, Matthew Garrett wrote: >>> + if (!capable(CAP_COMPROMISE_KERNEL)) >>> + return -EPERM; >>> + >> >> Stale bits? > > Yeah. Did I manage to send out the old copy of that again? I'm sorry, > spending a few months concentrating on cloud stuff seems to have > entirely destroyed my ability to deal with git :( >
No, you mixed and matched in a single patch...
I still believe that CAP_RAWIO should be forbidden in this case.
-hpa
| |