From: Rosen Penev Date: Fri, 30 Mar 2018 22:18:02 +0000 (-0700) Subject: kernel: Restrict dmesg output to root. X-Git-Tag: v18.06.0-rc1~296 X-Git-Url: https://git.librecmc.org/?a=commitdiff_plain;h=45219c1c0ff9e896fc626ad3415cf2fe8a3c635d;p=oweals%2Fopenwrt.git kernel: Restrict dmesg output to root. In typical OpenWrt setups, there are no other users that have a shell spawned for them by default. This can be overriden by the kernel.dmesg_output syssctl. Signed-off-by: Rosen Penev --- diff --git a/target/linux/generic/config-3.18 b/target/linux/generic/config-3.18 index 04245531f6..0f66960fdc 100644 --- a/target/linux/generic/config-3.18 +++ b/target/linux/generic/config-3.18 @@ -3284,7 +3284,7 @@ CONFIG_SCSI_PROC_FS=y # CONFIG_SECCOMP is not set # CONFIG_SECURITY is not set # CONFIG_SECURITYFS is not set -# CONFIG_SECURITY_DMESG_RESTRICT is not set +CONFIG_SECURITY_DMESG_RESTRICT=y # CONFIG_SEEQ8005 is not set CONFIG_SELECT_MEMORY_MODEL=y # CONFIG_SENSORS_ABITUGURU is not set diff --git a/target/linux/generic/config-4.14 b/target/linux/generic/config-4.14 index c9ee88c751..f6bbc59ee4 100644 --- a/target/linux/generic/config-4.14 +++ b/target/linux/generic/config-4.14 @@ -3998,7 +3998,7 @@ CONFIG_SCSI_PROC_FS=y CONFIG_SECTION_MISMATCH_WARN_ONLY=y # CONFIG_SECURITY is not set # CONFIG_SECURITYFS is not set -# CONFIG_SECURITY_DMESG_RESTRICT is not set +CONFIG_SECURITY_DMESG_RESTRICT=y CONFIG_SELECT_MEMORY_MODEL=y # CONFIG_SENSORS_ABITUGURU is not set # CONFIG_SENSORS_ABITUGURU3 is not set diff --git a/target/linux/generic/config-4.4 b/target/linux/generic/config-4.4 index 3285000eb4..d29f27d747 100644 --- a/target/linux/generic/config-4.4 +++ b/target/linux/generic/config-4.4 @@ -3423,7 +3423,7 @@ CONFIG_SCSI_PROC_FS=y CONFIG_SECTION_MISMATCH_WARN_ONLY=y # CONFIG_SECURITY is not set # CONFIG_SECURITYFS is not set -# CONFIG_SECURITY_DMESG_RESTRICT is not set +CONFIG_SECURITY_DMESG_RESTRICT=y CONFIG_SELECT_MEMORY_MODEL=y # CONFIG_SENSORS_ABITUGURU is not set # CONFIG_SENSORS_ABITUGURU3 is not set diff --git a/target/linux/generic/config-4.9 b/target/linux/generic/config-4.9 index 3f050c205c..1cc607d4dd 100644 --- a/target/linux/generic/config-4.9 +++ b/target/linux/generic/config-4.9 @@ -3766,7 +3766,7 @@ CONFIG_SCSI_PROC_FS=y CONFIG_SECTION_MISMATCH_WARN_ONLY=y # CONFIG_SECURITY is not set # CONFIG_SECURITYFS is not set -# CONFIG_SECURITY_DMESG_RESTRICT is not set +CONFIG_SECURITY_DMESG_RESTRICT=y CONFIG_SELECT_MEMORY_MODEL=y # CONFIG_SENSORS_ABITUGURU is not set # CONFIG_SENSORS_ABITUGURU3 is not set