Nicholas Bishop d0a1865cf7 efi/esrt: Allow ESRT access without CAP_SYS_ADMIN
Access to the files in /sys/firmware/efi/esrt has been restricted to
CAP_SYS_ADMIN since support for ESRT was added, but this seems overly
restrictive given that the files are read-only and just provide
information about UEFI firmware updates.

Remove the CAP_SYS_ADMIN restriction so that a non-root process can read
the files, provided a suitably-privileged process changes the file
ownership first. The files are still read-only and still owned by root
by default.

Signed-off-by: Nicholas Bishop <nicholasbishop@google.com>
Signed-off-by: Ard Biesheuvel <ardb@kernel.org>
2023-06-06 15:33:59 +02:00
..
2022-12-13 15:22:14 -08:00
2023-02-03 23:59:58 +01:00
2022-12-13 14:31:47 -08:00
2022-12-13 14:31:47 -08:00
2023-05-17 18:21:34 +02:00
2022-03-08 13:55:52 +02:00
2023-05-17 18:21:34 +02:00