Re: [PATCH] missing checks in exec_permission_light()

pmenage@ensim.com
Fri, 03 May 2002 01:36:11 -0700


In article <0C01A29FBAE24448A792F5C68F5EA47D27C6C7@nasdaq.ms.ensim.com>,
you write:
>Hi!
>
>> + if (S_ISDIR(inode->i_mode) && capable(CAP_DAC_READ_SEARCH))
>> + return 0;
>
>Is this right? This means that root can do cat /, no? That does not
>seem like expected behaviour.
> Pavel

exec_permission_lite() is only used for MAY_EXEC checks.

Paul
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/