1 files changed, 4 insertions, 1 deletions

diff --git a/security/min_addr.c b/security/min_addr.c
index c844eed7915d..f728728f193b 100644
--- a/security/min_addr.c
+++ b/security/min_addr.c
@@ -33,6 +33,9 @@ int mmap_min_addr_handler(struct ctl_table *table, int write,
 {
         int ret;
 
+        if (write && !capable(CAP_SYS_RAWIO))
+                return -EPERM;
+
         ret = proc_doulongvec_minmax(table, write, buffer, lenp, ppos);
 
         update_mmap_min_addr();
@@ -40,7 +43,7 @@ int mmap_min_addr_handler(struct ctl_table *table, int write,
         return ret;
 }
 
-int __init init_mmap_min_addr(void)
+static int __init init_mmap_min_addr(void)
 {
         update_mmap_min_addr();