openkylin
/
linux
mirror of https://gitee.com/openkylin/linux.git
9
0
Fork 0
Code Issues Projects Releases Wiki Activity

[PATCH] VM: add capabilites check to set_zone_reclaim 

Add a capability check to sys_set_zone_reclaim().  This syscall is not
something that should be available to a user.

Signed-off-by:  Martin Hicks <mort@sgi.com>
Signed-off-by: Andrew Morton <akpm@osdl.org>
Signed-off-by: Linus Torvalds <torvalds@osdl.org>
This commit is contained in:
Martin Hicks 2005-09-03 15:54:50 -07:00 committed by Linus Torvalds
parent 242e546862
commit bce5f6ba34
2 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
include/linux/capability.h
View File

@ -233,6 +233,7 @@ typedef __u32 kernel_cap_t;
/* Allow enabling/disabling tagged queuing on SCSI controllers and sending /* Allow enabling/disabling tagged queuing on SCSI controllers and sending
arbitrary SCSI commands */ arbitrary SCSI commands */
/* Allow setting encryption key on loopback filesystem */ /* Allow setting encryption key on loopback filesystem */
/* Allow setting zone reclaim policy */
#define CAP_SYS_ADMIN 21 #define CAP_SYS_ADMIN 21

3
mm/vmscan.c
View File

@ -1375,6 +1375,9 @@ asmlinkage long sys_set_zone_reclaim(unsigned int node, unsigned int zone,
struct zone *z; struct zone *z;
int i; int i;
if (!capable(CAP_SYS_ADMIN))
return -EACCES;
if (node >= MAX_NUMNODES || !node_online(node)) if (node >= MAX_NUMNODES || !node_online(node))
return -EINVAL; return -EINVAL;