X-Git-Url: http://plrg.eecs.uci.edu/git/?a=blobdiff_plain;f=security%2Fmin_addr.c;h=f728728f193bdc0b1a3d578c0f1fa69b016dfabb;hb=d94880b547779baaaa9e9b733c38881cad8aa685;hp=c844eed7915d0d270c058c16d6b3db40ffa576d0;hpb=35b9b535e7aabc1cd9850733802697d7ce8ef268;p=firefly-linux-kernel-4.4.55.git

diff --git a/security/min_addr.c b/security/min_addr.c
index c844eed7915d..f728728f193b 100644
--- a/security/min_addr.c
+++ b/security/min_addr.c
@@ -33,6 +33,9 @@ int mmap_min_addr_handler(struct ctl_table *table, int write,
 {
 	int ret;
 
+	if (write && !capable(CAP_SYS_RAWIO))
+		return -EPERM;
+
 	ret = proc_doulongvec_minmax(table, write, buffer, lenp, ppos);
 
 	update_mmap_min_addr();
@@ -40,7 +43,7 @@ int mmap_min_addr_handler(struct ctl_table *table, int write,
 	return ret;
 }
 
-int __init init_mmap_min_addr(void)
+static int __init init_mmap_min_addr(void)
 {
 	update_mmap_min_addr();