Chris Wright a628e7b87e pci: use security_capable() when checking capablities during config space read ... This reintroduces commit 47970b1b which was subsequently reverted as f00eaeea. The original change was broken and caused X startup failures and generally made privileged processes incapable of reading device dependent config space. The normal capable() interface returns true on success, but the LSM interface returns 0 on success. This thinko is now fixed in this patch, and has been confirmed to work properly. So, once again...Eric Paris noted that commit de139a3 ("pci: check caps from sysfs file open to read device dependent config space") caused the capability check to bypass security modules and potentially auditing. Rectify this by calling security_capable() when checking the open file's capabilities for config space reads. Reported-by: Eric Paris <eparis@redhat.com> Tested-by: Dave Young <hidave.darkstar@gmail.com> Acked-by: James Morris <jmorris@namei.org> Cc: Dave Airlie <airlied@gmail.com> Cc: Alex Riesen <raa.lkml@gmail.com> Cc: Sedat Dilek <sedat.dilek@googlemail.com> Cc: Linus Torvalds <torvalds@linux-foundation.org> Signed-off-by: Chris Wright <chrisw@sous-sol.org> Signed-off-by: James Morris <jmorris@namei.org>		2011-02-15 19:06:31 +11:00
..
hotplug	headers: kobject.h redux	2011-01-10 08:51:44 -08:00
pcie	kconfig: rename CONFIG_EMBEDDED to CONFIG_EXPERT	2011-01-20 17:02:05 -08:00
.gitignore
access.c
bus.c
dmar.c
hotplug-pci.c
hotplug.c
htirq.c
intel-iommu.c
intr_remapping.c
intr_remapping.h
ioapic.c
iov.c
iova.c
irq.c
Kconfig	xen/pci: Make xen-pcifront be dependent on XEN_XENBUS_FRONTEND	2011-01-05 16:31:12 -05:00
Makefile
msi.c	PCI: Add mask bit definition for MSI-X table	2010-12-23 12:53:08 -08:00
msi.h
pci-acpi.c	PCI/PM: Report wakeup events before resuming devices	2011-01-14 08:55:43 -08:00
pci-driver.c	PCI: fix __pci_device_probe kernel-doc warning	2010-12-23 12:53:09 -08:00
pci-label.c
pci-stub.c	PCI: pci-stub: ignore zero-length id parameters	2010-12-23 12:53:52 -08:00
pci-sysfs.c	pci: use security_capable() when checking capablities during config space read	2011-02-15 19:06:31 +11:00
pci.c	PCI/PM: Report wakeup events before resuming devices	2011-01-14 08:55:43 -08:00
pci.h	PCI/PM: Use pm_wakeup_event() directly for reporting wakeup events	2011-01-14 08:55:43 -08:00
probe.c
proc.c
quirks.c
remove.c
rom.c
search.c
setup-bus.c
setup-irq.c
setup-res.c
slot.c
syscall.c
vpd.c
xen-pcifront.c