linux-hardening - Re: [PATCH] cap_syslog: remove CAP_SYS_ADMIN when dmesg

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Mon, 15 Jan 2024 09:24:22 +0800 (GMT+08:00)
From: 孟敬姿 <mengjingzi@....ac.cn>
To: "Kees Cook" <keescook@...omium.org>
Cc: gregkh@...uxfoundation.org, gpiccoli@...lia.com, 
	john.ogness@...utronix.de, linux-hardening@...r.kernel.org, 
	linux-kernel@...r.kernel.org, pmladek@...e.com, rostedt@...dmis.org, 
	senozhatsky@...omium.org, tony.luck@...el.com
Subject: Re: [PATCH] cap_syslog: remove CAP_SYS_ADMIN when dmesg_restrict

I tested on ubuntu 22.04.3 LTS kernel 6.2.16 and Fedora 39 kernel 6.6.11,
the warning is gone, and CAP_SYS_ADMIN is no longer authorized to bypass 
check_syslog_permissions().

Best regards,
Jingzi