]> www.infradead.org Git - users/jedix/linux-maple.git/commit
ovl: modify ovl_permission() to do checks on two inodes
authorVivek Goyal <vgoyal@redhat.com>
Fri, 1 Jul 2016 20:34:27 +0000 (16:34 -0400)
committerShan Hai <shan.hai@oracle.com>
Fri, 4 Aug 2017 05:48:24 +0000 (13:48 +0800)
commit550f7025888744e822eb17dd7cf26996fba0d004
treec46319494dcb1b2a04c825734fdb4c6be8d9e5cd
parentecf9c8db3cbc07239e1d031c254d7df7357506bb
ovl: modify ovl_permission() to do checks on two inodes

Right now ovl_permission() calls __inode_permission(realinode), to do
permission checks on real inode and no checks are done on overlay inode.

Modify it to do checks both on overlay inode as well as underlying inode.
Checks on overlay inode will be done with the creds of calling task while
checks on underlying inode will be done with the creds of mounter.

Signed-off-by: Vivek Goyal <vgoyal@redhat.com>
Signed-off-by: Miklos Szeredi <mszeredi@redhat.com>
Orabug: 26401569

(backport upstream commit c0ca3d70e8d3cf81e2255a217f7ca402f5ed0862)

Signed-off-by: Shan Hai <shan.hai@oracle.com>
Reviewed-by: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com>
fs/overlayfs/inode.c