Received: by 2002:a05:7412:8d11:b0:fa:4934:9f with SMTP id bj17csp281546rdb; Sun, 14 Jan 2024 17:30:17 -0800 (PST) X-Google-Smtp-Source: AGHT+IFsBfR0O3Qv5vRpwNbl+kjzB5LkF5BFwi1pWB1+WvTrhf8gL18wp/oJPb5JYbukS+Zr6eON X-Received: by 2002:ad4:5c8c:0:b0:681:21cc:4b4e with SMTP id o12-20020ad45c8c000000b0068121cc4b4emr6920737qvh.11.1705282217219; Sun, 14 Jan 2024 17:30:17 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1705282217; cv=none; d=google.com; s=arc-20160816; b=HdlFzaFQcA84bfFuYOw1zuxclqrhZQqFyrc1K8Qtw+c6xd714GmkPc87ScTn2Lmd2i Q/XNcYYUHi2UONBe6Mq7wqRTtH8pTeWQa05JzIvqi2j4m2dldsqpHWXrq464KGaLcez5 Ohw28iwHl16ZHDrpJ6vWACwMES6KMzvWtgmMt2pTnfe+NOh3oqbu3qbmtqUUY45ITn5z +Tc+LPvOaH8mnKlOZsFayJQpDKs3yl1XePutbIBYrGQD4ZvuB23xuuTD4FORiJMvHpKl 56uGXdRRpP5iY8sNfYPVetm7H3z1wCrmRgrUVbuuJeNl+5PkDvVU6uUxUcN5PCsreR82 bsoA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=message-id:mime-version:list-unsubscribe:list-subscribe:list-id :precedence:content-transfer-encoding:references:in-reply-to:subject :cc:to:from:date; bh=tAMRbukbyV4V/xCuwKNRiQwGJUuh8XNFpoOzgrMkR50=; fh=2arqxfVBp07u0D4El11d4zCINjvtbLhrDR6xp+uFU/Q=; b=dJUwxCRyjhMve8X9BSIboN9lBwZSXXsGdA4qQ7xJURtKFulmbh8KR6dQu/FqRrN6bU nKx8YWVm2spu7HF9m2RwJgZAOLD/jp5QMrVrgs1GJb+QDaKvsW5yz8UdSwT5Imlgj998 m6A/KI8s4lmvgF9KzORyCF698/YnXOiW1Xtrn9Zz7ydBO20AaSZg5I94XGgYKMlRQPNw +o0ICL7t8FDpI7+3/MN1MC74cib0OyRbP4BBh1Ykh3mjczKQkmOzHi8YWd9XzGI/uYiR yNyqSH3L+nVFevGMABlPrwoeFS6znbYDTjF9pnrGm03zYBsAjKnTMnfOONnMZWPhs2cx KC6A== ARC-Authentication-Results: i=1; mx.google.com; spf=pass (google.com: domain of linux-kernel+bounces-25580-linux.lists.archive=gmail.com@vger.kernel.org designates 147.75.199.223 as permitted sender) smtp.mailfrom="linux-kernel+bounces-25580-linux.lists.archive=gmail.com@vger.kernel.org" Return-Path: Received: from ny.mirrors.kernel.org (ny.mirrors.kernel.org. [147.75.199.223]) by mx.google.com with ESMTPS id k6-20020a0cabc6000000b0067f9989a92csi7031830qvb.396.2024.01.14.17.30.17 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Sun, 14 Jan 2024 17:30:17 -0800 (PST) Received-SPF: pass (google.com: domain of linux-kernel+bounces-25580-linux.lists.archive=gmail.com@vger.kernel.org designates 147.75.199.223 as permitted sender) client-ip=147.75.199.223; Authentication-Results: mx.google.com; spf=pass (google.com: domain of linux-kernel+bounces-25580-linux.lists.archive=gmail.com@vger.kernel.org designates 147.75.199.223 as permitted sender) smtp.mailfrom="linux-kernel+bounces-25580-linux.lists.archive=gmail.com@vger.kernel.org" Received: from smtp.subspace.kernel.org (wormhole.subspace.kernel.org [52.25.139.140]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ny.mirrors.kernel.org (Postfix) with ESMTPS id F0C391C20A56 for ; Mon, 15 Jan 2024 01:30:16 +0000 (UTC) Received: from localhost.localdomain (localhost.localdomain [127.0.0.1]) by smtp.subspace.kernel.org (Postfix) with ESMTP id 5A05115CE; Mon, 15 Jan 2024 01:30:07 +0000 (UTC) Received: from cstnet.cn (smtp86.cstnet.cn [159.226.251.86]) (using TLSv1.2 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id DC11E1396; Mon, 15 Jan 2024 01:29:59 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; dmarc=none (p=none dis=none) header.from=iie.ac.cn Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=iie.ac.cn Received: from mengjingzi$iie.ac.cn ( [111.199.65.109] ) by ajax-webmail-APP-16 (Coremail) ; Mon, 15 Jan 2024 09:24:22 +0800 (GMT+08:00) Date: Mon, 15 Jan 2024 09:24:22 +0800 (GMT+08:00) X-CM-HeaderCharset: UTF-8 From: =?UTF-8?B?5a2f5pWs5ae/?= To: "Kees Cook" Cc: gregkh@linuxfoundation.org, gpiccoli@igalia.com, john.ogness@linutronix.de, linux-hardening@vger.kernel.org, linux-kernel@vger.kernel.org, pmladek@suse.com, rostedt@goodmis.org, senozhatsky@chromium.org, tony.luck@intel.com Subject: Re: [PATCH] cap_syslog: remove CAP_SYS_ADMIN when dmesg_restrict X-Priority: 3 X-Mailer: Coremail Webmail Server Version XT5.0.15 build 20230921(8ad33efc) Copyright (c) 2002-2024 www.mailtech.cn cnic.cn In-Reply-To: <202401080956.7FBE02F54C@keescook> References: <2024010306-tweezers-skinhead-083e@gregkh> <20240105062007.26965-1-mengjingzi@iie.ac.cn> <202401080956.7FBE02F54C@keescook> Content-Transfer-Encoding: base64 Content-Type: text/plain; charset=UTF-8 Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Message-ID: <4660f3ea.625f.18d0ab83c58.Coremail.mengjingzi@iie.ac.cn> X-Coremail-Locale: zh_CN X-CM-TRANSID:sQCowAA3f4tGiaRlDdYGAA--.12749W X-CM-SenderInfo: pphqwyxlqj6xo6llvhldfou0/1tbiDAcRE2Wj9+fUSAAAsD X-Coremail-Antispam: 1Ur529EdanIXcx71UUUUU7IcSsGvfJ3iIAIbVAYjsxI4VWxJw CS07vEb4IE77IF4wCS07vE1I0E4x80FVAKz4kxMIAIbVAFxVCaYxvI4VCIwcAKzIAtYxBI daVFxhVjvjDU= SSB0ZXN0ZWQgb24gdWJ1bnR1IDIyLjA0LjMgTFRTIGtlcm5lbCA2LjIuMTYgYW5kIEZlZG9yYSAz OSBrZXJuZWwgNi42LjExLAp0aGUgd2FybmluZyBpcyBnb25lLCBhbmQgQ0FQX1NZU19BRE1JTiBp cyBubyBsb25nZXIgYXV0aG9yaXplZCB0byBieXBhc3MgCmNoZWNrX3N5c2xvZ19wZXJtaXNzaW9u cygpLgoKQmVzdCByZWdhcmRzLApKaW5nemkK