Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 106eaf19 authored by Jeremy Cline's avatar Jeremy Cline Committed by Sahil Sonar
Browse files

BACKPORT: lockdown: Allow unprivileged users to see lockdown status



A number of userspace tools, such as systemtap, need a way to see the
current lockdown state so they can gracefully deal with the kernel being
locked down. The state is already exposed in
/sys/kernel/security/lockdown, but is only readable by root. Adjust the
permissions so unprivileged users can read the state.

Fixes: 000d388ed3bb ("security: Add a static lockdown policy LSM")
Cc: Frank Ch. Eigler <fche@redhat.com>
Change-Id: I9eb77e97933780ec1e5f1656e135c171deccd8e7
Signed-off-by: default avatarJeremy Cline <jcline@redhat.com>
Signed-off-by: default avatarJames Morris <jmorris@namei.org>
parent 8642d774
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment