lockdown: Allow unprivileged users to see lockdown status
authorJeremy Cline <jcline@redhat.com>
Thu, 14 May 2020 14:05:46 +0000 (10:05 -0400)
committerJames Morris <jmorris@namei.org>
Thu, 14 May 2020 17:23:05 +0000 (10:23 -0700)
commit60cf7c5ed5f7087c4de87a7676b8c82d96fd166c
treefa5456d44e98dadc7c7e2f360408995b09229e62
parent3e27a33932df104f4f9ff811467b0b4ccebde773
lockdown: Allow unprivileged users to see lockdown status

A number of userspace tools, such as systemtap, need a way to see the
current lockdown state so they can gracefully deal with the kernel being
locked down. The state is already exposed in
/sys/kernel/security/lockdown, but is only readable by root. Adjust the
permissions so unprivileged users can read the state.

Fixes: 000d388ed3bb ("security: Add a static lockdown policy LSM")
Cc: Frank Ch. Eigler <fche@redhat.com>
Signed-off-by: Jeremy Cline <jcline@redhat.com>
Signed-off-by: James Morris <jmorris@namei.org>
security/lockdown/lockdown.c