staging: android: logger: enforce GID and CAP check on log flush
Restrict log flushing to those in the logs group, or anyone with CAP_SYSLOG. Cc: Android Kernel Team <kernel-team@android.com> Cc: Charndeep Grewal <csgrewa@tycho.ncsc.mil> Signed-off-by: Charndeep Grewal <csgrewa@tycho.ncsc.mil> Signed-off-by: John Stultz <john.stultz@linaro.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
This commit is contained in:
parent
0441bcf4db
commit
1e70bd46a5
1 changed files with 5 additions and 0 deletions
|
@ -695,6 +695,11 @@ static long logger_ioctl(struct file *file, unsigned int cmd, unsigned long arg)
|
||||||
ret = -EBADF;
|
ret = -EBADF;
|
||||||
break;
|
break;
|
||||||
}
|
}
|
||||||
|
if (!(in_egroup_p(file->f_dentry->d_inode->i_gid) ||
|
||||||
|
capable(CAP_SYSLOG))) {
|
||||||
|
ret = -EPERM;
|
||||||
|
break;
|
||||||
|
}
|
||||||
list_for_each_entry(reader, &log->readers, list)
|
list_for_each_entry(reader, &log->readers, list)
|
||||||
reader->r_off = log->w_off;
|
reader->r_off = log->w_off;
|
||||||
log->head = log->w_off;
|
log->head = log->w_off;
|
||||||
|
|
Loading…
Add table
Reference in a new issue