Prev: [PATCH 3/4] replace the old non generic API
Next: [tip:irq/core] genirq: Clear CPU mask in affinity_hint when none is provided
From: Adam Lackorzynski on 12 May 2010 05:30
Although /proc/sys/vm/mmap_min_addr has 644 permissions a read call returns
-EPERM. Allow any user to read the mmap_min_addr value.

Signed-off-by: Adam Lackorzynski <adam(a)os.inf.tu-dresden.de>
---
security/min_addr.c | 2 +-
1 files changed, 1 insertions(+), 1 deletions(-)

diff --git a/security/min_addr.c b/security/min_addr.c
index e86f297..f728728 100644
--- a/security/min_addr.c
+++ b/security/min_addr.c
@@ -33,7 +33,7 @@ int mmap_min_addr_handler(struct ctl_table *table, int write,
{
int ret;

- if (!capable(CAP_SYS_RAWIO))
+ if (write && !capable(CAP_SYS_RAWIO))
return -EPERM;

ret = proc_doulongvec_minmax(table, write, buffer, lenp, ppos);
--
1.7.1

--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo(a)vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/
 | 
Pages: 1
Prev: [PATCH 3/4] replace the old non generic API
Next: [tip:irq/core] genirq: Clear CPU mask in affinity_hint when none is provided