Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit fca92bb2 authored by Michal Suchanek's avatar Michal Suchanek Committed by Greg Kroah-Hartman
Browse files

debugfs: lockdown: Allow reading debugfs files that are not world readable 



[ Upstream commit 358fcf5ddbec4e6706405847d6a666f5933a6c25 ]

When the kernel is locked down the kernel allows reading only debugfs
files with mode 444. Mode 400 is also valid but is not allowed.

Make the 444 into a mask.

Fixes: 5496197f ("debugfs: Restrict debugfs when the kernel is locked down")
Signed-off-by: default avatarMichal Suchanek <msuchanek@suse.de>
Link: https://lore.kernel.org/r/20220104170505.10248-1-msuchanek@suse.de


Signed-off-by: default avatarGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: default avatarSasha Levin <sashal@kernel.org>
parent 46541f21

fs/debugfs/file.c

+1 −1
Original line number Diff line number Diff line
@@ -146,7 +146,7 @@ static int debugfs_locked_down(struct inode *inode, 
			       struct file *filp,

			       const struct file_operations *real_fops)

{

	if ((inode->i_mode & 07777) == 0444 &&

	if ((inode->i_mode & 07777 & ~0444) == 0 &&

	    !(filp->f_mode & FMODE_WRITE) &&

	    !real_fops->unlocked_ioctl &&

	    !real_fops->compat_ioctl &&