summaryrefslogtreecommitdiffstats
path: root/main/linux-virt-grsec/remove-cap-sys-admin-for-proc-sys.patch
blob: 6fa56ba134bfd66b5613e858f26d087f8016101a (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
diff --git a/fs/proc/proc_sysctl.c b/fs/proc/proc_sysctl.c
index 1e6dc7e..d65d119 100644
--- a/fs/proc/proc_sysctl.c
+++ b/fs/proc/proc_sysctl.c
@@ -521,8 +521,6 @@ static ssize_t proc_sys_call_handler(struct file *filp, void __user *buf,
 	dput(filp->f_path.dentry);
 	if (!gr_acl_handle_open(filp->f_path.dentry, filp->f_path.mnt, op))
 		goto out;
-	if (write && !capable(CAP_SYS_ADMIN))
-		goto out;
 #endif
 
 	/* careful: calling conventions are nasty here */