Re: [Ocfs2-devel] [PATCH] ocfs2: trusted xattr missing CAP_SYS_ADMIN check

2015-03-24 Thread Andrew Morton
On Tue, 24 Mar 2015 11:46:32 -0400 Sanidhya Kashyap wrote: > The trusted extended attributes are only visible to the process which hvae > CAP_SYS_ADMIN capability but the check is missing in ocfs2 xattr_handler > trusted list. The check is important because this will be used for > implementing

[PATCH] ocfs2: trusted xattr missing CAP_SYS_ADMIN check

2015-03-24 Thread Sanidhya Kashyap
The trusted extended attributes are only visible to the process which hvae CAP_SYS_ADMIN capability but the check is missing in ocfs2 xattr_handler trusted list. The check is important because this will be used for implementing mechanisms in the userspace for which other ordinary processes should n