return ret;
}
- if (!vx_check(0, VX_ADMIN) || !capable(CAP_SYS_ADMIN))
+ if (!vx_check(0, VX_ADMIN) || !capable(CAP_SYS_ADMIN)
+ /* might make sense in the future, or not ... */
+ || vx_flags(VX_INFO_LOCK, 0))
return -EPERM;
/* ugly hack for Spectator */