debugfs: lockdown: Allow reading debugfs files that are not world readable
authorMichal Suchanek <msuchanek@suse.de>
Tue, 4 Jan 2022 17:05:05 +0000 (18:05 +0100)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Thu, 6 Jan 2022 14:47:41 +0000 (15:47 +0100)
commit358fcf5ddbec4e6706405847d6a666f5933a6c25
tree6278d4043acd4ac0b286c5f77e8526178ea4ecc5
parent00eb74ea2c14418042347eaa34c6b73ac6ec1e76
debugfs: lockdown: Allow reading debugfs files that are not world readable

When the kernel is locked down the kernel allows reading only debugfs
files with mode 444. Mode 400 is also valid but is not allowed.

Make the 444 into a mask.

Fixes: 5496197f9b08 ("debugfs: Restrict debugfs when the kernel is locked down")
Signed-off-by: Michal Suchanek <msuchanek@suse.de>
Link: https://lore.kernel.org/r/20220104170505.10248-1-msuchanek@suse.de
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
fs/debugfs/file.c