1. seandroid
  2. Untitled project
  3. kernel/common

Commits

Charndeep Grewal  committed bae4417

android: logger: enforce GID and CAP check on log flush

Restrict log flushing to those in the logs group, or
anyone with CAP_SYSLOG.

Change-Id: I5d6977d1c0d60ffe8487771cc195789e5db95454
Signed-off-by: Charndeep Grewal <csgrewa@tycho.ncsc.mil>

  • Participants
  • Parent commits a1b7a37
  • Branches android-3.4

Comments (0)

Files changed (1)

File drivers/staging/android/logger.c

View file
  • Ignore whitespace
 			ret = -EBADF;
 			break;
 		}
+		if (!(in_egroup_p(file->f_dentry->d_inode->i_gid) ||
+				capable(CAP_SYSLOG))) {
+			ret = -EPERM;
+			break;
+		}
 		list_for_each_entry(reader, &log->readers, list)
 			reader->r_off = log->w_off;
 		log->head = log->w_off;