> + if (S_ISDIR(inode->i_mode) && capable(CAP_DAC_READ_SEARCH))
> + return 0;
Is this right? This means that root can do cat /, no? That does not
seem like expected behaviour.
Pavel
-- (about SSSCA) "I don't say this lightly. However, I really think that the U.S. no longer is classifiable as a democracy, but rather as a plutocracy." --hpa - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/