diff options
| author |   Linus Torvalds <torvalds@linux-foundation.org> | 2011-02-10 17:53:55 -0800 |
|---|---|---|
| committer | Linus Torvalds <torvalds@linux-foundation.org> | 2011-02-10 17:53:55 -0800 |
| commit | ee24aebffb75a7f940cf52c8cf6910947b3130c0 (patch) | |
| tree | ed1eafa8b1a30b078c9fa680aafbb49632921a0d /tools/perf/scripts/python | |
| parent | Merge branch 'usb-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb-2.6 (diff) | |
| download | wireguard-linux-ee24aebffb75a7f940cf52c8cf6910947b3130c0.tar.xz wireguard-linux-ee24aebffb75a7f940cf52c8cf6910947b3130c0.zip | |
cap_syslog: accept CAP_SYS_ADMIN for now
In commit ce6ada35bdf7 ("security: Define CAP_SYSLOG") Serge Hallyn
introduced CAP_SYSLOG, but broke backwards compatibility by no longer
accepting CAP_SYS_ADMIN as an override (it would cause a warning and
then reject the operation).
Re-instate CAP_SYS_ADMIN - but keeping the warning - as an acceptable
capability until any legacy applications have been updated. There are
apparently applications out there that drop all capabilities except for
CAP_SYS_ADMIN in order to access the syslog.
(This is a re-implementation of a patch by Serge, cleaning the logic up
and making the code more readable)
Acked-by: Serge Hallyn <serge@hallyn.com>
Reviewed-by: James Morris <jmorris@namei.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Diffstat (limited to 'tools/perf/scripts/python')
0 files changed, 0 insertions, 0 deletions