• Linus Torvalds's avatar
    Merge tag 'fs.xattr.simple.noaudit.v6.2' of... · 07d7a4d6
    Linus Torvalds authored
    Merge tag 'fs.xattr.simple.noaudit.v6.2' of git://git.kernel.org/pub/scm/linux/kernel/git/vfs/idmapping
    
    Pull xattr audit fix from Seth Forshee:
     "This is a single patch to remove auditing of the capability check in
      simple_xattr_list().
    
      This check is done to check whether trusted xattrs should be included
      by listxattr(2). SELinux will normally log a denial when capable() is
      called and the task's SELinux context doesn't have the corresponding
      capability permission allowed, which can end up spamming the log.
    
      Since a failed check here cannot be used to infer malicious intent,
      auditing is of no real value, and it makes sense to stop auditing the
      capability check"
    
    * tag 'fs.xattr.simple.noaudit.v6.2' of git://git.kernel.org/pub/scm/linux/kernel/git/vfs/idmapping:
      fs: don't audit the capability check in simple_xattr_list()
    07d7a4d6
xattr.c 28.9 KB