Smack: change rule cap check
authorCasey Schaufler <casey@schaufler-ca.com>
Thu, 19 Dec 2013 21:23:26 +0000 (13:23 -0800)
committerChanho Park <parkch98@gmail.com>
Fri, 23 Jan 2015 14:27:04 +0000 (23:27 +0900)
commita2d4a57072b1541f13dd279004454abcf87b4e10
treeabbfeec67c6862cd2dc2d3cdd7532629524f2cdc
parent73a5c54c8bd14a1d9845606ce3592c6e6f83375d
Smack: change rule cap check

smk_write_change_rule() is calling capable rather than
the more correct smack_privileged(). This allows for setting
rules in violation of the onlycap facility. This is the
simple repair.

Change-Id: Icb5321b5b5355d64b0b029d9131cf60b5e97d356
Signed-off-by: Casey Schaufler <casey@schaufler-ca.com>
Signed-off-by: Ɓukasz Stelmach <l.stelmach@samsung.com>
security/smack/smackfs.c