Jeremy Cline 60cf7c5ed5 lockdown: Allow unprivileged users to see lockdown status ...

A number of userspace tools, such as systemtap, need a way to see the
current lockdown state so they can gracefully deal with the kernel being
locked down. The state is already exposed in
/sys/kernel/security/lockdown, but is only readable by root. Adjust the
permissions so unprivileged users can read the state.

Fixes: 000d388ed3 ("security: Add a static lockdown policy LSM")
Cc: Frank Ch. Eigler <fche@redhat.com>
Signed-off-by: Jeremy Cline <jcline@redhat.com>
Signed-off-by: James Morris <jmorris@namei.org>

2020-05-14 10:23:05 -07:00

..

apparmor

Merge branch 'work.mount0' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs

2019-07-19 10:42:02 -07:00

integrity

integrity: remove pointless subdir-$(CONFIG_...)

2019-10-05 15:29:49 +09:00

keys

KEYS: trusted: correctly initialize digests and fix locking issue

2019-09-25 02:43:53 +03:00

loadpin

proc/sysctl: add shared variables for range check

2019-07-18 17:08:07 -07:00

lockdown

lockdown: Allow unprivileged users to see lockdown status

2020-05-14 10:23:05 -07:00

safesetid

LSM: SafeSetID: Stop releasing uninitialized ruleset

2019-09-17 11:27:05 -07:00

selinux

Merge tag 'selinux-pr-20191007' of git://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/selinux

2019-10-08 10:51:37 -07:00

smack

Merge tag 'smack-for-5.4-rc1' of git://github.com/cschaufler/smack-next

2019-09-23 14:25:45 -07:00

tomoyo

treewide: Add SPDX license identifier - Makefile/Kconfig

2019-05-21 10:50:46 +02:00

yama

proc/sysctl: add shared variables for range check

2019-07-18 17:08:07 -07:00

commoncap.c

Merge branch 'next-lsm' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security

2019-07-09 12:24:21 -07:00

device_cgroup.c

docs: cgroup-v1: add it to the admin-guide book

2019-07-15 11:03:02 -03:00

inode.c

Merge branch 'work.mount0' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs

2019-07-19 10:42:02 -07:00

Kconfig

Merge branch 'next-lockdown' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security

2019-09-28 08:14:15 -07:00

Kconfig.hardening

Merge tag 'meminit-v5.3-rc2' of git://git.kernel.org/pub/scm/linux/kernel/git/kees/linux

2019-07-28 12:33:15 -07:00

lsm_audit.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500

2019-06-19 17:09:55 +02:00

Makefile

security: Add a static lockdown policy LSM

2019-08-19 21:54:15 -07:00

min_addr.c

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

security.c

security: remove EARLY_LSM_COUNT which never used

2020-01-27 11:19:41 -08:00