aports/main/linux-virt-grsec/remove-cap-sys-admin-for-proc-sys.patch
2013-10-25 20:22:15 +00:00

15 lines
467 B
Diff

diff --git a/fs/proc/proc_sysctl.c b/fs/proc/proc_sysctl.c
index 1e6dc7e..d65d119 100644
--- a/fs/proc/proc_sysctl.c
+++ b/fs/proc/proc_sysctl.c
@@ -521,8 +521,6 @@ static ssize_t proc_sys_call_handler(struct file *filp, void __user *buf,
dput(filp->f_path.dentry);
if (!gr_acl_handle_open(filp->f_path.dentry, filp->f_path.mnt, op))
goto out;
- if (write && !capable(CAP_SYS_ADMIN))
- goto out;
#endif
/* careful: calling conventions are nasty here */