Re: [PATCH] fs: Reorder inode_owner_or_capable() to avoid needless
From: Andy Lutomirski
Date: Wed Jun 21 2017 - 10:55:53 EST
On Tue, Jun 20, 2017 at 2:40 PM, Kees Cook <keescook@xxxxxxxxxxxx> wrote:
> Checking for capabilities should be the last operation when performing
> access control tests so that PF_SUPERPRIV is set only when it was required
> for success (implying that the capability was needed for the operation).
Reviewed-by: Andy Lutomirski <luto@xxxxxxxxxx>