svn commit: r321739 - stable/11/sys/dev/ksyms

[Mark Johnston]

Author: markj
Date: Mon Jul 31 00:35:21 2017
New Revision: 321739
URL: https://svnweb.freebsd.org/changeset/base/321739

Log:
  MFC r321639:
  Restrict permissions on /dev/ksyms to 0400.

Modified:
  stable/11/sys/dev/ksyms/ksyms.c
Directory Properties:
  stable/11/   (props changed)

Modified: stable/11/sys/dev/ksyms/ksyms.c
==============================================================================
--- stable/11/sys/dev/ksyms/ksyms.c	Mon Jul 31 00:34:36 2017	(r321738)
+++ stable/11/sys/dev/ksyms/ksyms.c	Mon Jul 31 00:35:21 2017	(r321739)
@@ -592,7 +592,7 @@ ksyms_modevent(module_t mod __unused, int type, void *
 	case MOD_LOAD:
 		mtx_init(&ksyms_mtx, "KSyms mtx", NULL, MTX_DEF);
 		ksyms_dev = make_dev(&ksyms_cdevsw, 0, UID_ROOT, GID_WHEEL,
-		    0444, KSYMS_DNAME);
+		    0400, KSYMS_DNAME);
 		break;
 
 	case MOD_UNLOAD: