c71b02e4d2
This reverts commit 68c4a4f8ab, with
various conflict clean-ups.
The capability check required too much privilege compared to simple DAC
controls. A system builder was forced to have crash handler processes
run with CAP_SYSLOG which would give it the ability to read (and wipe)
the _current_ dmesg, which is much more access than being given access
only to the historical log stored in pstorefs.
With the prior commit to make the root directory 0750, the files are
protected by default but a system builder can now opt to give access
to a specific group (via chgrp on the pstorefs root directory) without
being forced to also give away CAP_SYSLOG.
Suggested-by: Nick Kralevich <nnk@google.com>
Signed-off-by: Kees Cook <keescook@chromium.org>
Reviewed-by: Petr Mladek <pmladek@suse.cz>
Reviewed-by: Sergey Senozhatsky <sergey.senozhatsky@gmail.com>
53 lines
1.9 KiB
C
53 lines
1.9 KiB
C
/* Syslog internals
|
|
*
|
|
* Copyright 2010 Canonical, Ltd.
|
|
* Author: Kees Cook <kees.cook@canonical.com>
|
|
*
|
|
* This program is free software; you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License as published by
|
|
* the Free Software Foundation; either version 2, or (at your option)
|
|
* any later version.
|
|
*
|
|
* This program is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with this program; see the file COPYING. If not, write to
|
|
* the Free Software Foundation, 675 Mass Ave, Cambridge, MA 02139, USA.
|
|
*/
|
|
|
|
#ifndef _LINUX_SYSLOG_H
|
|
#define _LINUX_SYSLOG_H
|
|
|
|
/* Close the log. Currently a NOP. */
|
|
#define SYSLOG_ACTION_CLOSE 0
|
|
/* Open the log. Currently a NOP. */
|
|
#define SYSLOG_ACTION_OPEN 1
|
|
/* Read from the log. */
|
|
#define SYSLOG_ACTION_READ 2
|
|
/* Read all messages remaining in the ring buffer. */
|
|
#define SYSLOG_ACTION_READ_ALL 3
|
|
/* Read and clear all messages remaining in the ring buffer */
|
|
#define SYSLOG_ACTION_READ_CLEAR 4
|
|
/* Clear ring buffer. */
|
|
#define SYSLOG_ACTION_CLEAR 5
|
|
/* Disable printk's to console */
|
|
#define SYSLOG_ACTION_CONSOLE_OFF 6
|
|
/* Enable printk's to console */
|
|
#define SYSLOG_ACTION_CONSOLE_ON 7
|
|
/* Set level of messages printed to console */
|
|
#define SYSLOG_ACTION_CONSOLE_LEVEL 8
|
|
/* Return number of unread characters in the log buffer */
|
|
#define SYSLOG_ACTION_SIZE_UNREAD 9
|
|
/* Return size of the log buffer */
|
|
#define SYSLOG_ACTION_SIZE_BUFFER 10
|
|
|
|
#define SYSLOG_FROM_READER 0
|
|
#define SYSLOG_FROM_PROC 1
|
|
|
|
int do_syslog(int type, char __user *buf, int count, int source);
|
|
|
|
#endif /* _LINUX_SYSLOG_H */
|