Re: [PATCH RESEND] lockdown: Allow unprivileged users to see lockdown status
From: James Morris <jmorris@namei.org>
Date: 2020-05-14 17:28:21
Also in:
lkml
On Thu, 14 May 2020, Jeremy Cline wrote:
A number of userspace tools, such as systemtap, need a way to see the
current lockdown state so they can gracefully deal with the kernel being
locked down. The state is already exposed in
/sys/kernel/security/lockdown, but is only readable by root. Adjust the
permissions so unprivileged users can read the state.
Fixes: 000d388ed3bb ("security: Add a static lockdown policy LSM")
Cc: Frank Ch. Eigler <redacted>
Signed-off-by: Jeremy Cline <redacted>Applied to git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security.git next-general -- James Morris [off-list ref]