[openwrt/openwrt] kernel: Restrict dmesg output to root.

LEDE Commits lede-commits at lists.infradead.org
Mon Apr 30 00:02:00 PDT 2018


blogic pushed a commit to openwrt/openwrt.git, branch master:
https://git.lede-project.org/45219c1c0ff9e896fc626ad3415cf2fe8a3c635d

commit 45219c1c0ff9e896fc626ad3415cf2fe8a3c635d
Author: Rosen Penev <rosenp at gmail.com>
AuthorDate: Fri Mar 30 15:18:02 2018 -0700

    kernel: Restrict dmesg output to root.
    
    In typical OpenWrt setups, there are no other users that have a shell spawned for them by default.
    
    This can be overriden by the kernel.dmesg_output syssctl.
    
    Signed-off-by: Rosen Penev <rosenp at gmail.com>
---
 target/linux/generic/config-3.18 | 2 +-
 target/linux/generic/config-4.14 | 2 +-
 target/linux/generic/config-4.4  | 2 +-
 target/linux/generic/config-4.9  | 2 +-
 4 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/target/linux/generic/config-3.18 b/target/linux/generic/config-3.18
index 0424553..0f66960 100644
--- a/target/linux/generic/config-3.18
+++ b/target/linux/generic/config-3.18
@@ -3284,7 +3284,7 @@ CONFIG_SCSI_PROC_FS=y
 # CONFIG_SECCOMP is not set
 # CONFIG_SECURITY is not set
 # CONFIG_SECURITYFS is not set
-# CONFIG_SECURITY_DMESG_RESTRICT is not set
+CONFIG_SECURITY_DMESG_RESTRICT=y
 # CONFIG_SEEQ8005 is not set
 CONFIG_SELECT_MEMORY_MODEL=y
 # CONFIG_SENSORS_ABITUGURU is not set
diff --git a/target/linux/generic/config-4.14 b/target/linux/generic/config-4.14
index c9ee88c..f6bbc59 100644
--- a/target/linux/generic/config-4.14
+++ b/target/linux/generic/config-4.14
@@ -3998,7 +3998,7 @@ CONFIG_SCSI_PROC_FS=y
 CONFIG_SECTION_MISMATCH_WARN_ONLY=y
 # CONFIG_SECURITY is not set
 # CONFIG_SECURITYFS is not set
-# CONFIG_SECURITY_DMESG_RESTRICT is not set
+CONFIG_SECURITY_DMESG_RESTRICT=y
 CONFIG_SELECT_MEMORY_MODEL=y
 # CONFIG_SENSORS_ABITUGURU is not set
 # CONFIG_SENSORS_ABITUGURU3 is not set
diff --git a/target/linux/generic/config-4.4 b/target/linux/generic/config-4.4
index 3285000..d29f27d 100644
--- a/target/linux/generic/config-4.4
+++ b/target/linux/generic/config-4.4
@@ -3423,7 +3423,7 @@ CONFIG_SCSI_PROC_FS=y
 CONFIG_SECTION_MISMATCH_WARN_ONLY=y
 # CONFIG_SECURITY is not set
 # CONFIG_SECURITYFS is not set
-# CONFIG_SECURITY_DMESG_RESTRICT is not set
+CONFIG_SECURITY_DMESG_RESTRICT=y
 CONFIG_SELECT_MEMORY_MODEL=y
 # CONFIG_SENSORS_ABITUGURU is not set
 # CONFIG_SENSORS_ABITUGURU3 is not set
diff --git a/target/linux/generic/config-4.9 b/target/linux/generic/config-4.9
index 3f050c2..1cc607d 100644
--- a/target/linux/generic/config-4.9
+++ b/target/linux/generic/config-4.9
@@ -3766,7 +3766,7 @@ CONFIG_SCSI_PROC_FS=y
 CONFIG_SECTION_MISMATCH_WARN_ONLY=y
 # CONFIG_SECURITY is not set
 # CONFIG_SECURITYFS is not set
-# CONFIG_SECURITY_DMESG_RESTRICT is not set
+CONFIG_SECURITY_DMESG_RESTRICT=y
 CONFIG_SELECT_MEMORY_MODEL=y
 # CONFIG_SENSORS_ABITUGURU is not set
 # CONFIG_SENSORS_ABITUGURU3 is not set



More information about the lede-commits mailing list