summaryrefslogtreecommitdiffstats
path: root/fs/debugfs
diff options
context:
space:
mode:
authorMichal Suchanek <msuchanek@suse.de>2022-01-04 18:05:05 +0100
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>2022-01-06 15:47:41 +0100
commit358fcf5ddbec4e6706405847d6a666f5933a6c25 (patch)
tree6278d4043acd4ac0b286c5f77e8526178ea4ecc5 /fs/debugfs
parentdriver core: Make bus notifiers in right order in really_probe() (diff)
downloadlinux-358fcf5ddbec4e6706405847d6a666f5933a6c25.tar.xz
linux-358fcf5ddbec4e6706405847d6a666f5933a6c25.zip
debugfs: lockdown: Allow reading debugfs files that are not world readable
When the kernel is locked down the kernel allows reading only debugfs files with mode 444. Mode 400 is also valid but is not allowed. Make the 444 into a mask. Fixes: 5496197f9b08 ("debugfs: Restrict debugfs when the kernel is locked down") Signed-off-by: Michal Suchanek <msuchanek@suse.de> Link: https://lore.kernel.org/r/20220104170505.10248-1-msuchanek@suse.de Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'fs/debugfs')
-rw-r--r--fs/debugfs/file.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/fs/debugfs/file.c b/fs/debugfs/file.c
index 7d162b0efbf0..950c63fa4d0b 100644
--- a/fs/debugfs/file.c
+++ b/fs/debugfs/file.c
@@ -147,7 +147,7 @@ static int debugfs_locked_down(struct inode *inode,
struct file *filp,
const struct file_operations *real_fops)
{
- if ((inode->i_mode & 07777) == 0444 &&
+ if ((inode->i_mode & 07777 & ~0444) == 0 &&
!(filp->f_mode & FMODE_WRITE) &&
!real_fops->unlocked_ioctl &&
!real_fops->compat_ioctl &&