From 45219c1c0ff9e896fc626ad3415cf2fe8a3c635d Mon Sep 17 00:00:00 2001 From: Rosen Penev Date: Fri, 30 Mar 2018 15:18:02 -0700 Subject: kernel: Restrict dmesg output to root. In typical OpenWrt setups, there are no other users that have a shell spawned for them by default. This can be overriden by the kernel.dmesg_output syssctl. Signed-off-by: Rosen Penev --- target/linux/generic/config-3.18 | 2 +- target/linux/generic/config-4.14 | 2 +- target/linux/generic/config-4.4 | 2 +- target/linux/generic/config-4.9 | 2 +- 4 files changed, 4 insertions(+), 4 deletions(-) (limited to 'target') diff --git a/target/linux/generic/config-3.18 b/target/linux/generic/config-3.18 index 0424553..0f66960 100644 --- a/target/linux/generic/config-3.18 +++ b/target/linux/generic/config-3.18 @@ -3284,7 +3284,7 @@ CONFIG_SCSI_PROC_FS=y # CONFIG_SECCOMP is not set # CONFIG_SECURITY is not set # CONFIG_SECURITYFS is not set -# CONFIG_SECURITY_DMESG_RESTRICT is not set +CONFIG_SECURITY_DMESG_RESTRICT=y # CONFIG_SEEQ8005 is not set CONFIG_SELECT_MEMORY_MODEL=y # CONFIG_SENSORS_ABITUGURU is not set diff --git a/target/linux/generic/config-4.14 b/target/linux/generic/config-4.14 index c9ee88c..f6bbc59 100644 --- a/target/linux/generic/config-4.14 +++ b/target/linux/generic/config-4.14 @@ -3998,7 +3998,7 @@ CONFIG_SCSI_PROC_FS=y CONFIG_SECTION_MISMATCH_WARN_ONLY=y # CONFIG_SECURITY is not set # CONFIG_SECURITYFS is not set -# CONFIG_SECURITY_DMESG_RESTRICT is not set +CONFIG_SECURITY_DMESG_RESTRICT=y CONFIG_SELECT_MEMORY_MODEL=y # CONFIG_SENSORS_ABITUGURU is not set # CONFIG_SENSORS_ABITUGURU3 is not set diff --git a/target/linux/generic/config-4.4 b/target/linux/generic/config-4.4 index 3285000..d29f27d 100644 --- a/target/linux/generic/config-4.4 +++ b/target/linux/generic/config-4.4 @@ -3423,7 +3423,7 @@ CONFIG_SCSI_PROC_FS=y CONFIG_SECTION_MISMATCH_WARN_ONLY=y # CONFIG_SECURITY is not set # CONFIG_SECURITYFS is not set -# CONFIG_SECURITY_DMESG_RESTRICT is not set +CONFIG_SECURITY_DMESG_RESTRICT=y CONFIG_SELECT_MEMORY_MODEL=y # CONFIG_SENSORS_ABITUGURU is not set # CONFIG_SENSORS_ABITUGURU3 is not set diff --git a/target/linux/generic/config-4.9 b/target/linux/generic/config-4.9 index 3f050c2..1cc607d 100644 --- a/target/linux/generic/config-4.9 +++ b/target/linux/generic/config-4.9 @@ -3766,7 +3766,7 @@ CONFIG_SCSI_PROC_FS=y CONFIG_SECTION_MISMATCH_WARN_ONLY=y # CONFIG_SECURITY is not set # CONFIG_SECURITYFS is not set -# CONFIG_SECURITY_DMESG_RESTRICT is not set +CONFIG_SECURITY_DMESG_RESTRICT=y CONFIG_SELECT_MEMORY_MODEL=y # CONFIG_SENSORS_ABITUGURU is not set # CONFIG_SENSORS_ABITUGURU3 is not set -- cgit v1.1