Andy Lutomirski
23adbe12ef
fs,userns: Change inode_capable to capable_wrt_inode_uidgid
...
The kernel has no concept of capabilities with respect to inodes; inodes
exist independently of namespaces. For example, inode_capable(inode,
CAP_LINUX_IMMUTABLE) would be nonsense.
This patch changes inode_capable to check for uid and gid mappings and
renames it to capable_wrt_inode_uidgid, which should make it more
obvious what it does.
Fixes CVE-2014-4014.
Cc: Theodore Ts'o <tytso@mit.edu>
Cc: Serge Hallyn <serge.hallyn@ubuntu.com>
Cc: "Eric W. Biederman" <ebiederm@xmission.com>
Cc: Dave Chinner <david@fromorbit.com>
Cc: stable@vger.kernel.org
Signed-off-by: Andy Lutomirski <luto@amacapital.net>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
2014-06-10 13:57:22 -07:00
..
2013-05-07 18:45:36 -05:00
2014-03-07 16:19:14 +11:00
2013-11-06 16:31:27 -06:00
2013-10-30 13:37:38 -05:00
2013-05-07 18:45:36 -05:00
2011-08-12 16:21:35 -05:00
2011-08-12 16:21:35 -05:00
2012-11-19 20:11:24 -06:00
2014-02-07 15:26:11 +11:00
2014-01-25 23:58:21 -05:00
2014-02-27 15:15:27 +11:00
2014-02-27 15:23:10 +11:00
2013-10-23 16:28:49 -05:00
2014-02-27 15:23:10 +11:00
2013-10-23 14:11:30 -05:00
2014-04-17 08:15:19 +10:00
2013-09-04 09:23:46 -04:00
2013-10-30 13:47:22 -05:00
2014-05-06 07:37:31 +10:00
2013-10-23 14:21:40 -05:00
2014-05-06 07:37:31 +10:00
2014-05-06 07:37:31 +10:00
2013-10-23 14:21:40 -05:00
2010-01-20 10:47:48 +11:00
2014-05-06 07:37:31 +10:00
2013-08-12 16:53:39 -05:00
2013-10-30 13:59:56 -05:00
2009-01-09 15:53:54 +11:00
2014-02-27 15:23:10 +11:00
2013-10-23 16:28:49 -05:00
2014-04-14 18:15:11 +10:00
2014-02-24 10:58:19 +11:00
2014-04-17 08:15:25 +10:00
2014-02-24 10:58:19 +11:00
2014-02-27 15:18:23 +11:00
2013-10-23 16:28:49 -05:00
2014-02-07 15:26:11 +11:00
2013-10-23 16:28:49 -05:00
2014-04-17 08:15:28 +10:00
2014-02-27 15:18:23 +11:00
2012-11-19 20:11:24 -06:00
2014-04-04 08:07:35 +11:00
2014-05-06 07:37:31 +10:00
2013-10-30 13:59:56 -05:00
2013-10-30 13:48:41 -05:00
2014-02-27 15:15:27 +11:00
2014-02-27 15:23:10 +11:00
2014-02-27 15:23:10 +11:00
2014-02-27 15:23:10 +11:00
2014-02-27 15:23:10 +11:00
2013-10-30 13:47:22 -05:00
2013-12-18 15:52:36 -06:00
2013-12-11 14:59:20 -06:00
2014-02-27 16:51:26 +11:00
2013-10-30 13:49:18 -05:00
2013-12-10 10:00:33 -06:00
2011-08-12 16:21:35 -05:00
2014-02-27 15:23:10 +11:00
2013-12-13 11:34:08 +11:00
2013-12-13 11:34:08 +11:00
2014-02-07 14:55:54 +11:00
2013-10-23 14:11:30 -05:00
2014-02-27 15:21:37 +11:00
2014-02-27 15:21:07 +11:00
2014-05-15 09:21:52 +10:00
2011-08-12 16:21:35 -05:00
2013-10-23 16:28:49 -05:00
2013-10-23 16:28:49 -05:00
2013-12-13 11:34:02 +11:00
2013-08-12 16:07:13 -05:00
2014-05-15 09:22:07 +10:00
2013-10-23 16:28:49 -05:00
2013-08-12 17:00:11 -05:00
2014-02-27 15:15:27 +11:00
2013-10-08 14:28:09 -05:00
2013-12-10 10:04:27 -06:00
2011-01-11 20:28:17 -06:00
2012-11-08 15:34:59 -06:00
2014-02-27 15:23:10 +11:00
2013-10-23 16:28:49 -05:00
2014-03-13 19:13:05 +11:00
2013-12-13 15:51:48 +11:00
2013-10-23 16:28:49 -05:00
2013-09-12 16:13:41 -07:00
2013-12-13 11:34:02 +11:00
2013-08-12 16:10:35 -05:00
2014-02-27 15:23:10 +11:00
2013-10-23 14:11:30 -05:00
2014-01-09 16:03:18 -06:00
2013-10-23 16:28:49 -05:00
2013-12-13 11:34:05 +11:00
2013-12-13 11:34:05 +11:00
2014-04-17 08:15:30 +10:00
2014-04-17 08:15:30 +10:00
2012-05-14 16:20:54 -05:00
2013-12-10 09:59:37 -06:00
2011-08-12 16:21:35 -05:00
2014-06-10 13:57:22 -07:00
2013-08-12 16:56:06 -05:00
2014-02-10 10:27:43 +11:00
2013-10-01 15:42:34 -05:00
2014-05-15 09:22:37 +10:00
2014-01-25 23:58:21 -05:00
2013-12-13 15:51:48 +11:00
2010-06-24 11:35:17 +10:00
2014-02-27 15:21:07 +11:00
2014-03-13 19:12:13 +11:00
2013-10-23 14:11:30 -05:00
2013-10-23 16:17:44 -05:00
2013-12-18 10:36:58 -06:00
2010-05-24 10:33:39 -05:00
2013-10-23 16:28:49 -05:00
2014-05-05 16:18:37 +10:00
2014-02-07 15:26:07 +11:00
2013-10-23 16:17:44 -05:00
2013-05-07 18:45:36 -05:00
2014-05-05 16:18:37 +10:00
2013-11-18 09:29:36 -06:00
2011-02-01 11:42:43 +01:00
2010-01-15 15:34:22 -06:00
2013-10-23 16:28:49 -05:00
2013-12-06 14:06:15 -06:00
2014-05-15 09:23:24 +10:00
2013-12-06 14:16:33 -06:00
2013-10-23 14:28:35 -05:00
2013-10-23 14:28:35 -05:00
2013-10-23 16:28:49 -05:00
2014-02-07 14:53:50 +11:00
2013-10-23 17:16:32 -05:00
2013-10-30 13:59:56 -05:00
2014-05-05 16:18:37 +10:00
2014-02-27 15:15:27 +11:00
2014-01-06 13:50:06 -06:00
2012-03-14 11:09:06 -05:00
2012-03-14 11:09:06 -05:00
2014-05-15 09:23:07 +10:00
2012-10-17 12:01:25 -05:00
2014-02-27 15:23:10 +11:00
2014-03-13 19:14:43 +11:00
2013-10-08 14:53:02 -05:00
2013-06-17 17:42:25 -05:00
2012-11-08 15:34:59 -06:00
2013-10-23 16:28:49 -05:00
2014-04-14 18:15:11 +10:00
2013-11-06 12:41:51 -06:00
2014-03-07 16:19:14 +11:00
2013-12-04 14:26:57 -06:00
2013-10-23 16:17:44 -05:00
2013-11-18 09:42:08 -06:00
2013-10-23 16:17:44 -05:00
2014-03-13 19:14:43 +11:00
2014-03-13 19:14:43 +11:00
2013-12-13 15:51:48 +11:00
2014-02-07 15:26:07 +11:00
2013-12-13 11:34:02 +11:00
2013-08-22 08:40:24 -05:00
2013-12-04 14:11:05 -06:00
2014-01-25 23:58:21 -05:00
2013-05-07 18:45:36 -05:00