|
Line
Link Here
|
| 0 |
-- a/grsecurity/grsec_tpe.c |
0 |
++ b/grsecurity/grsec_tpe.c |
|
Lines 25-32
Link Here
|
| 25 |
return 0; |
25 |
return 0; |
| 26 |
} |
26 |
} |
| 27 |
#ifdef CONFIG_GRKERNSEC_TPE_ALL |
27 |
#ifdef CONFIG_GRKERNSEC_TPE_ALL |
| 28 |
if (current->uid && grsec_enable_tpe && grsec_enable_tpe_all && |
28 |
if (current->uid && (grsec_enable_tpe && grsec_enable_tpe_all |
| 29 |
((inode->i_uid && (inode->i_uid != current->uid)) || |
29 |
#ifdef CONFIG_GRKERNSEC_TPE_INVERT |
|
|
30 |
&& !in_group_p(grsec_tpe_gid) |
| 31 |
#endif |
| 32 |
) && ((inode->i_uid && (inode->i_uid != current->uid)) || |
| 30 |
(inode->i_mode & S_IWGRP) || (inode->i_mode & S_IWOTH))) { |
33 |
(inode->i_mode & S_IWGRP) || (inode->i_mode & S_IWOTH))) { |
| 31 |
gr_log_fs_generic(GR_DONT_AUDIT, GR_EXEC_TPE_MSG, file->f_dentry, file->f_vfsmnt); |
34 |
gr_log_fs_generic(GR_DONT_AUDIT, GR_EXEC_TPE_MSG, file->f_dentry, file->f_vfsmnt); |
| 32 |
return 0; |
35 |
return 0; |
