[patch] grsec-2.1.8-disable_modules-fix.patch

grsec-2.1.8-disable_modules-fix.patch (text/plain), 588 bytes, created by kfm on 2006-02-05 20:44:29 UTC

--- linux-2.6.14-grsec-2.1.8-2.6.14.6-200601211647/grsecurity/grsec_sysctl.c	2006-02-05 23:18:05.000000000 -0500
+++ linux-2.6.14-grsec-2.1.8-2.6.14.7-200602052251/grsecurity/grsec_sysctl.c	2006-02-05 23:18:35.000000000 -0500
@@ -18,7 +18,8 @@ gr_handle_sysctl_mod(const char *dirname
 	}
 #endif
 #ifdef CONFIG_GRKERNSEC_MODSTOP
-	if (!strcmp(dirname, "grsecurity") && grsec_modstop && (op & 002)) {
+	if (!strcmp(dirname, "grsecurity") && !strcmp(name, "disable_modules") &&
+	    grsec_modstop && (op & 002)) {
 		gr_log_str(GR_DONT_AUDIT, GR_SYSCTL_MSG, name);
 		return -EACCES;
 	}