Jingzi Meng 09ce61e27d cap_syslog: remove CAP_SYS_ADMIN when dmesg_restrict ... CAP_SYSLOG was separated from CAP_SYS_ADMIN and introduced in Linux 2.6.37 (2010-11). For a long time, certain syslog actions required CAP_SYS_ADMIN or CAP_SYSLOG. Maybe it’s time to officially remove CAP_SYS_ADMIN for more fine-grained control. CAP_SYS_ADMIN was once removed but added back for backwards compatibility reasons. In commit 38ef4c2e43 ("syslog: check cap_syslog when dmesg_restrict") (2010-12), CAP_SYS_ADMIN was no longer needed. And in commit ee24aebffb ("cap_syslog: accept CAP_SYS_ADMIN for now") (2011-02), it was accepted again. Since then, CAP_SYS_ADMIN has been preserved. Now that almost 13 years have passed, the legacy application may have had enough time to be updated. Signed-off-by: Jingzi Meng <mengjingzi@iie.ac.cn> Reviewed-by: Kees Cook <keescook@chromium.org> Link: https://lore.kernel.org/r/20240105062007.26965-1-mengjingzi@iie.ac.cn Signed-off-by: Kees Cook <keescook@chromium.org>		2024-02-01 10:04:58 -08:00
..
bpf	bpf: enforce types for __arg_ctx-tagged arguments in global subprogs	2024-01-17 20:20:06 -08:00
cgroup	Driver core changes for 6.8-rc1	2024-01-18 09:48:40 -08:00
configs	…
debug	kdb: Fix a potential buffer overflow in kdb_local()	2024-01-17 17:19:06 +00:00
dma	dma-mapping fixes for Linux 6.8	2024-01-18 16:49:34 -08:00
entry	entry: Move syscall_enter_from_user_mode() to header file	2023-12-21 23:12:18 +01:00
events	Many singleton patches against the MM code. The patch series which	2024-01-09 11:18:47 -08:00
futex	futex: Prevent the reuse of stale pi_state	2024-01-19 12:58:17 +01:00
gcov	…
irq	genirq: Initialize resend_node hlist for all interrupt descriptors	2024-01-24 14:15:41 +01:00
kcsan	…
livepatch	…
locking	RCU pull request for v6.8	2024-01-12 16:35:58 -08:00
module	Modules changes for v6.8-rc1	2024-01-10 18:00:18 -08:00
power	PM: hibernate: Repair excess function parameter description warning	2023-12-20 19:19:26 +01:00
printk	cap_syslog: remove CAP_SYS_ADMIN when dmesg_restrict	2024-02-01 10:04:58 -08:00
rcu	rcu: Defer RCU kthreads wakeup when CPU is dying	2024-01-24 22:46:17 +05:30
sched	Fix a cpufreq related performance regression on certain systems,	2024-01-18 11:57:33 -08:00
time	tick/sched: Preserve number of idle sleeps across CPU hotplug events	2024-01-25 09:52:40 +01:00
trace	tracing: Ensure visibility when inserting an element into tracing_map	2024-01-22 17:15:40 -05:00
.gitignore	…
Kconfig.freezer	…
Kconfig.hz	…
Kconfig.kexec	kexec: select CRYPTO from KEXEC_FILE instead of depending on it	2023-12-20 13:46:19 -08:00
Kconfig.locks	…
Kconfig.preempt	…
Makefile	kernel/numa.c: Move logging out of numa.h	2023-12-20 19:26:30 -05:00
acct.c	…
async.c	header cleanups for 6.8	2024-01-10 16:43:55 -08:00
audit.c	audit: Send netlink ACK before setting connection in auditd_set	2023-11-12 22:33:49 -05:00
audit.h	…
audit_fsnotify.c	…
audit_tree.c	…
audit_watch.c	audit: don't WARN_ON_ONCE(!current->mm) in audit_exe_compare()	2023-11-14 17:34:27 -05:00
auditfilter.c	…
auditsc.c	…
backtracetest.c	…
bounds.c	…
capability.c	…
cfi.c	…
compat.c	…
configs.c	…
context_tracking.c	…
cpu.c	slab updates for 6.8	2024-01-09 10:36:07 -08:00
cpu_pm.c	…
crash_core.c	kernel/crash_core.c: make __crash_hotplug_lock static	2024-01-12 15:20:47 -08:00
crash_dump.c	…
cred.c	cred: get rid of CONFIG_DEBUG_CREDENTIALS	2023-12-15 14:19:48 -08:00
delayacct.c	…
dma.c	…
exec_domain.c	…
exit.c	header cleanups for 6.8	2024-01-10 16:43:55 -08:00
exit.h	…
extable.c	…
fail_function.c	…
fork.c	exec: Distinguish in_execve from in_exec	2024-01-24 11:48:52 -08:00
freezer.c	Linux 6.7-rc6	2023-12-23 15:52:13 +01:00
gen_kheaders.sh	…
groups.c	…
hung_task.c	…
iomem.c	…
irq_work.c	…
jump_label.c	…
kallsyms.c	…
kallsyms_internal.h	…
kallsyms_selftest.c	…
kallsyms_selftest.h	…
kcmp.c	…
kcov.c	…
kexec.c	…
kexec_core.c	kexec: do syscore_shutdown() in kernel_kexec	2024-01-12 15:20:47 -08:00
kexec_elf.c	…
kexec_file.c	kexec_file: fix incorrect temp_start value in locate_mem_hole_top_down()	2023-12-29 12:22:25 -08:00
kexec_internal.h	…
kheaders.c	…
kprobes.c	kprobes: consistent rcu api usage for kretprobe holder	2023-12-01 14:53:55 +09:00
ksyms_common.c	…
ksysfs.c	…
kthread.c	…
latencytop.c	…
module_signature.c	…
notifier.c	…
nsproxy.c	…
numa.c	kernel/numa.c: Move logging out of numa.h	2023-12-20 19:26:30 -05:00
padata.c	…
panic.c	…
params.c	params: Fix multi-line comment style	2023-12-01 09:51:44 -08:00
pid.c	file: remove __receive_fd()	2023-12-12 14:24:14 +01:00
pid_namespace.c	wait: Remove uapi header file from main header file	2023-12-20 19:26:31 -05:00
pid_sysctl.h	…
profile.c	…
ptrace.c	Quite a lot of kexec work this time around. Many singleton patches in	2024-01-09 11:46:20 -08:00
range.c	…
reboot.c	Thermal control updates for 6.8-rc1	2024-01-09 16:20:17 -08:00
regset.c	…
relay.c	kernel: relay: remove relay_file_splice_read dead code, doesn't work	2023-12-29 12:22:27 -08:00
resource.c	Quite a lot of kexec work this time around. Many singleton patches in	2024-01-09 11:46:20 -08:00
resource_kunit.c	…
rseq.c	…
scftorture.c	…
scs.c	…
seccomp.c	file: remove __receive_fd()	2023-12-12 14:24:14 +01:00
signal.c	kernel/signal.c: simplify force_sig_info_to_task(), kill recalc_sigpending_and_wake()	2023-12-10 17:21:32 -08:00
smp.c	…
smpboot.c	…
smpboot.h	…
softirq.c	…
stackleak.c	…
stacktrace.c	stacktrace: fix kernel-doc typo	2023-12-29 12:22:29 -08:00
static_call.c	…
static_call_inline.c	…
stop_machine.c	…
sys.c	prctl: Disable prctl(PR_SET_MDWE) on parisc	2023-11-18 19:35:31 +01:00
sys_ni.c	lsm/stable-6.8 PR 20240105	2024-01-09 12:57:46 -08:00
sysctl-test.c	…
sysctl.c	…
task_work.c	…
taskstats.c	…
torture.c	…
tracepoint.c	…
tsacct.c	…
ucount.c	…
uid16.c	…
uid16.h	…
umh.c	…
up.c	…
user-return-notifier.c	…
user.c	…
user_namespace.c	mnt_idmapping: decouple from namespaces	2023-11-28 14:08:47 +01:00
usermode_driver.c	…
utsname.c	…
utsname_sysctl.c	…
vhost_task.c	…
watch_queue.c	watch_queue: fix kcalloc() arguments order	2023-12-21 13:17:54 +01:00
watchdog.c	watchdog: if panicking and we dumped everything, don't re-enable dumping	2023-12-29 12:22:30 -08:00
watchdog_buddy.c	…
watchdog_perf.c	…
workqueue.c	Merge branch 'for-6.7-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/tj/wq into for-6.8	2023-11-22 06:18:49 -10:00
workqueue_internal.h	…