Re: [PATCH] missing checks in exec_permission_light()

From: pmenage@ensim.com
Date: Fri May 03 2002 - 03:36:11 EST


In article <0C01A29FBAE24448A792F5C68F5EA47D27C6C7@nasdaq.ms.ensim.com>,
you write:
>Hi!
>
>> + if (S_ISDIR(inode->i_mode) && capable(CAP_DAC_READ_SEARCH))
>> + return 0;
>
>Is this right? This means that root can do cat /, no? That does not
>seem like expected behaviour.
> Pavel

exec_permission_lite() is only used for MAY_EXEC checks.

Paul
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/



This archive was generated by hypermail 2b29 : Tue May 07 2002 - 22:00:18 EST