On Tue, May 15, 2018 at 09:31:27AM -0500, Steve Wise wrote: > > cap net admin is not high enough privledge to see unhashed kernel > > pointers. CAP_RAW_IO? Or follow what printk does? > > > > Do you mean CAP_NET_RAW? Here's the comments for it:
Nope.. > Func restricted_pointer() from lib/vsprintf.c uses CAP_SYSLOG. The comment > for CAP_SYSLOG: Yikes, yes, that is probably the required logic here, including the kptr_restrict = 0 thing Jason
