SELinux: loosen DAC perms on reading policy (72e8c859) · Commits · 戴 / test

security/selinux/selinuxfs.c

+1 −1

Original line number	Diff line number	Diff line
		@@ -1832,7 +1832,7 @@ static int sel_fill_super(struct super_block sb, void data, int silent)
		[SEL_REJECT_UNKNOWN] = {"reject_unknown", &sel_handle_unknown_ops, S_IRUGO},
		[SEL_DENY_UNKNOWN] = {"deny_unknown", &sel_handle_unknown_ops, S_IRUGO},
		[SEL_STATUS] = {"status", &sel_handle_status_ops, S_IRUGO},
		[SEL_POLICY] = {"policy", &sel_policy_ops, S_IRUSR},
		[SEL_POLICY] = {"policy", &sel_policy_ops, S_IRUGO},
		/* last one */ {""}
		};
		ret = simple_fill_super(sb, SELINUX_MAGIC, selinux_files);