From: Sebastian Schmidt <yath@yath.de>
Date: Sun, 19 Oct 2014 18:05:15 +0000 (+0200)
Subject: pstore: Honor dmesg_restrict sysctl on dmesg dumps
X-Git-Tag: omap-for-v3.19/fixes-rc1~149^2~1
X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=68c4a4f8abc60c9440ede9cd123d48b78325f7a3;p=pandora-kernel.git

pstore: Honor dmesg_restrict sysctl on dmesg dumps

When the kernel.dmesg_restrict restriction is in place, only users with
CAP_SYSLOG should be able to access crash dumps (like: attacker is
trying to exploit a bug, watchdog reboots, attacker can happily read
crash dumps and logs).

This puts the restriction on console-* types as well as sensitive
information could have been leaked there.

Other log types are unaffected.

Signed-off-by: Sebastian Schmidt <yath@yath.de>
Acked-by: Kees Cook <keescook@chromium.org>
Signed-off-by: Tony Luck <tony.luck@intel.com>
---

Reading git-diff-tree failed