Hi all,

On Thu, Nov 13, 2014 at 11:21:18AM -0800, Kees Cook wrote:

quoted

This looks to come from your "Honor dmesg_restrict sysctl on dmesg dumps" patch

Oops, you are right.

quoted

The randconfig doesn't have CONFIG_PRINTK.  I guess we need to provide a stub
in <linux/syslog.h> to cover this.

Without CONFIG_PRINTK, check_syslog_permissions should probably fail.

Kees, I disagree. Without CONFIG_PRINTK, there isn't even a
dmesg_restrict sysctl, so there is no way to turn that on (AFAICS) and
we should retain the default behaviour.

I'll send a patch shortly.

Sebastian