http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/commit/fs/namei.c?h=linux-4.1.y&id=2058efbcb0eb148db2086266cfb048da42fd0a93 diff -urNpd linux-4.1.11-vs2.3.8.2~/fs/namei.c linux-4.1.11-vs2.3.8.2/fs/namei.c --- linux-4.1.11-vs2.3.8.2~/fs/namei.c 2015-10-22 19:05:02.606578156 -0500 +++ linux-4.1.11-vs2.3.8.2/fs/namei.c 2015-10-22 18:59:37.177576497 -0500 @@ -1580,6 +1580,9 @@ static int lookup_fast(struct nameidata */ if (negative) return -ENOENT; + + /* FIXME: check dx permission */ + path->mnt = mnt; path->dentry = dentry; if (likely(__follow_mount_rcu(nd, path, inode))) http://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/commit/kernel/printk/printk.c?h=linux-4.1.y&id=ae41bfc68161ea5d280091ccb9593e9f68d5db44 diff -urNpd linux-4.1.11-vs2.3.8.2~/kernel/printk/printk.c linux-4.1.11-vs2.3.8.2/kernel/printk/printk.c --- linux-4.1.11-vs2.3.8.2~/kernel/printk/printk.c 2015-10-22 19:05:02.642577384 -0500 +++ linux-4.1.11-vs2.3.8.2/kernel/printk/printk.c 2015-10-22 19:03:42.040307387 -0500 @@ -488,7 +488,7 @@ int check_syslog_permissions(int type, b goto ok; if (syslog_action_restricted(type)) { - if (capable(CAP_SYSLOG)) + if (vx_capable(CAP_SYSLOG, VXC_SYSLOG)) goto ok; /* * For historical reasons, accept CAP_SYS_ADMIN too, with