forked from Qortal/Brooklyn
21 lines
537 B
C
21 lines
537 B
C
|
#include <linux/kernel.h>
|
||
|
|
#include <linux/sched.h>
|
||
|
|
#include <linux/grsecurity.h>
|
||
|
|
#include <linux/grinternal.h>
|
||
|
|
|
||
|
|
int gr_proc_is_restricted(void)
|
||
|
|
{
|
||
|
|
#if defined(CONFIG_GRKERNSEC_PROC_USER) || defined(CONFIG_GRKERNSEC_PROC_USERGROUP)
|
||
|
|
const struct cred *cred = current_cred();
|
||
|
|
#endif
|
||
|
|
|
||
|
|
#ifdef CONFIG_GRKERNSEC_PROC_USER
|
||
|
|
if (!uid_eq(cred->fsuid, GLOBAL_ROOT_UID))
|
||
|
|
return -EACCES;
|
||
|
|
#elif defined(CONFIG_GRKERNSEC_PROC_USERGROUP)
|
||
|
|
if (!uid_eq(cred->fsuid, GLOBAL_ROOT_UID) && !in_group_p(grsec_proc_gid))
|
||
|
|
return -EACCES;
|
||
|
|
#endif
|
||
|
|
return 0;
|
||
|
|
}
|