]> git.baikalelectronics.ru Git - kernel.git/commit
pci: use security_capable() when checking capablities during config space read
authorChris Wright <chrisw@sous-sol.org>
Thu, 10 Feb 2011 23:58:56 +0000 (15:58 -0800)
committerJames Morris <jmorris@namei.org>
Fri, 11 Feb 2011 06:58:11 +0000 (17:58 +1100)
commitb8c41aba50c78a0a8b876f6c5529b7749a427bc0
tree66e5474c37ea12a28d52dc652978df0ab7a0287f
parent9c0a7459f25934dedcfa2219b1010ce47433e3b2
pci: use security_capable() when checking capablities during config space read

Eric Paris noted that commit 1fc888f ("pci: check caps from sysfs file
open to read device dependent config space") caused the capability check
to bypass security modules and potentially auditing.  Rectify this by
calling security_capable() when checking the open file's capabilities
for config space reads.

Reported-by: Eric Paris <eparis@redhat.com>
Signed-off-by: Chris Wright <chrisw@sous-sol.org>
Signed-off-by: James Morris <jmorris@namei.org>
drivers/pci/pci-sysfs.c