Serge E. Hallyn 7ea6600148 generic_permission: MAY_OPEN is not write access
generic_permission was refusing CAP_DAC_READ_SEARCH-enabled
processes from opening DAC-protected files read-only, because
do_filp_open adds MAY_OPEN to the open mask.

Ignore MAY_OPEN.  After this patch, CAP_DAC_READ_SEARCH is
again sufficient to open(fname, O_RDONLY) on a file to which
DAC otherwise refuses us read permission.

Reported-by: Mike Kazantsev <mk.fraggod@gmail.com>
Signed-off-by: Serge E. Hallyn <serue@us.ibm.com>
Tested-by: Mike Kazantsev <mk.fraggod@gmail.com>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
2009-12-30 12:35:44 -08:00
..
2009-12-10 15:02:50 +01:00
2009-12-10 09:59:23 +02:00
2009-12-15 08:53:10 -08:00
2009-12-16 07:20:06 -08:00
2009-12-22 12:27:35 -05:00
2009-12-20 20:19:51 -08:00
2009-12-17 11:03:25 -05:00
2009-12-16 07:20:18 -08:00
2009-12-17 11:03:25 -05:00
2009-12-14 21:40:04 +01:00
2009-12-16 07:20:06 -08:00
2009-12-17 11:03:25 -05:00
2009-12-16 07:20:13 -08:00
2009-12-22 12:27:34 -05:00
2009-12-17 04:52:13 -05:00
2009-12-17 11:03:25 -05:00
2009-12-14 18:12:11 -05:00
2009-12-22 12:27:34 -05:00
2009-12-17 10:51:40 -05:00
2009-10-04 15:05:10 -07:00
2009-12-16 12:16:49 -05:00