]> www.infradead.org Git - users/jedix/linux-maple.git/commit
ocfs2: trusted xattr missing CAP_SYS_ADMIN check
authorSanidhya Kashyap <sanidhya.gatech@gmail.com>
Fri, 4 Sep 2015 22:44:08 +0000 (15:44 -0700)
committerChuck Anderson <chuck.anderson@oracle.com>
Sat, 26 Nov 2016 23:43:18 +0000 (15:43 -0800)
commitab4467fd5b184b4bc0b08c55aaba9a0eb97a7057
tree11914ad9846b48d5b291e67b3d2ae8b6f236998a
parent2db65f63c93ed04ed4a21f1a4e6ee659adc334ee
ocfs2: trusted xattr missing CAP_SYS_ADMIN check

The trusted extended attributes are only visible to the process which
hvae CAP_SYS_ADMIN capability but the check is missing in ocfs2
xattr_handler trusted list.  The check is important because this will be
used for implementing mechanisms in the userspace for which other
ordinary processes should not have access to.

Signed-off-by: Sanidhya Kashyap <sanidhya.gatech@gmail.com>
Reviewed-by: Mark Fasheh <mfasheh@suse.de>
Cc: Joel Becker <jlbec@evilplan.org>
Cc: Taesoo kim <taesoo@gatech.edu>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
(cherry picked from commit 0f5e7b41f91814447defc34e915fc5d6e52266d9)

Orabug: 24939243

Signed-off-by: Junxiao Bi <junxiao.bi@oracle.com>
fs/ocfs2/xattr.c