Vasily Averin d194e5d666 security_syslog() should be called once only ... The final version of commit 637241a900 ("kmsg: honor dmesg_restrict sysctl on /dev/kmsg") lost few hooks, as result security_syslog() are processed incorrectly: - open of /dev/kmsg checks syslog access permissions by using check_syslog_permissions() where security_syslog() is not called if dmesg_restrict is set. - syslog syscall and /proc/kmsg calls do_syslog() where security_syslog can be executed twice (inside check_syslog_permissions() and then directly in do_syslog()) With this patch security_syslog() is called once only in all syslog-related operations regardless of dmesg_restrict value. Fixes: 637241a900 ("kmsg: honor dmesg_restrict sysctl on /dev/kmsg") Signed-off-by: Vasily Averin <vvs@virtuozzo.com> Cc: Kees Cook <keescook@chromium.org> Cc: Josh Boyer <jwboyer@redhat.com> Cc: Eric Paris <eparis@redhat.com> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>		2015-06-25 17:00:39 -07:00
..
braille.c	printk: Fix return of braille_register_console()	2013-08-06 13:18:12 -07:00
braille.h	printk: move braille console support into separate braille.[ch] files	2013-07-31 14:41:03 -07:00
console_cmdline.h	console: Fix console name size mismatch	2015-03-07 03:39:55 +01:00
Makefile	printk: move braille console support into separate braille.[ch] files	2013-07-31 14:41:03 -07:00
printk.c	security_syslog() should be called once only	2015-06-25 17:00:39 -07:00