pstore: Make default pstorefs root dir perms 0750
authorKees Cook <keescook@chromium.org>
Thu, 10 Aug 2017 03:43:17 +0000 (20:43 -0700)
committerKees Cook <keescook@chromium.org>
Thu, 17 Aug 2017 23:28:37 +0000 (16:28 -0700)
commitd7caa33687cea218b6d68beea89d10a45a901e19
tree734350f4d0037478c7064db3a5f637ececc6fca7
parent520eccdfe187591a51ea9ab4c1a024ae4d0f68d9
pstore: Make default pstorefs root dir perms 0750

Currently only DMESG and CONSOLE record types are protected, and it isn't
obvious that they are using a capability check. Instead switch to explicit
root directory mode of 0750 to keep files private by default. This will
allow the removal of the capability check, which was non-obvious and
forces a process to have possibly too much privilege when simple post-boot
chgrp for readers would be possible without it.

Signed-off-by: Kees Cook <keescook@chromium.org>
Reviewed-by: Sergey Senozhatsky <sergey.senozhatsky@gmail.com>
fs/pstore/inode.c