debugfs: more tightly restrict default mount mode
authorKees Cook <keescook@chromium.org>
Mon, 27 Aug 2012 20:32:15 +0000 (13:32 -0700)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Mon, 27 Aug 2012 20:42:02 +0000 (13:42 -0700)
commit82aceae4f0d42f03d9ad7d1e90389e731153898f
tree9e39183cb3d2a971ac794da1b94d4dd7f07faa5d
parent9db48aaf18d675ac41f550c9384154e0c00de2ef
debugfs: more tightly restrict default mount mode

Since the debugfs is mostly only used by root, make the default mount
mode 0700. Most system owners do not need a more permissive value,
but they can choose to weaken the restrictions via their fstab.

Signed-off-by: Kees Cook <keescook@chromium.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Documentation/filesystems/debugfs.txt
fs/debugfs/inode.c