• Andrew Morton's avatar
    [PATCH] Default hooks protecting the XATTR_SECURITY_PREFIX namespace · 3ba6fffc
    Andrew Morton authored
    From: Chris Wright <chrisw@osdl.org>
    
    Add default hooks for both the dummy and capability code to protect the
    XATTR_SECURITY_PREFIX namespace.  These EAs were fully accessible to
    unauthorized users, so a user that rebooted from an SELinux kernel to a
    default kernel would leave those critical EAs unprotected.
    
    (Acked by Stephen Smalley)
    3ba6fffc
commoncap.c 10.2 KB