Skip to content
Commit 47970b1b authored by Chris Wright's avatar Chris Wright Committed by James Morris
Browse files

pci: use security_capable() when checking capablities during config space read

Eric Paris noted that commit de139a33

 ("pci: check caps from sysfs file
open to read device dependent config space") caused the capability check
to bypass security modules and potentially auditing.  Rectify this by
calling security_capable() when checking the open file's capabilities
for config space reads.

Reported-by: default avatarEric Paris <eparis@redhat.com>
Signed-off-by: default avatarChris Wright <chrisw@sous-sol.org>
Signed-off-by: default avatarJames Morris <jmorris@namei.org>
parent 6037b715
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment