linux-stable/Documentation
Miklos Szeredi 438c84c2f0 ovl: don't follow redirects if redirect_dir=off
Overlayfs is following redirects even when redirects are disabled. If this
is unintentional (probably the majority of cases) then this can be a
problem.  E.g. upper layer comes from untrusted USB drive, and attacker
crafts a redirect to enable read access to otherwise unreadable
directories.

If "redirect_dir=off", then turn off following as well as creation of
redirects.  If "redirect_dir=follow", then turn on following, but turn off
creation of redirects (which is what "redirect_dir=off" does now).

This is a backward incompatible change, so make it dependent on a config
option.

Reported-by: David Howells <dhowells@redhat.com>
Signed-off-by: Miklos Szeredi <mszeredi@redhat.com>
2017-12-11 11:28:10 +01:00
..
2017-11-18 10:26:57 -08:00
2017-09-22 21:57:09 +02:00
2017-11-15 10:56:56 -08:00
2017-09-07 21:11:05 -07:00
2017-11-17 17:51:33 -08:00
2017-11-17 14:34:42 -08:00
2017-11-18 11:32:27 +09:00
2017-11-14 18:25:40 -08:00
2017-11-01 21:32:25 -07:00
2017-11-15 20:30:12 -08:00
2017-05-02 17:34:32 -07:00
2017-07-07 13:55:45 -07:00
2017-03-31 12:55:11 +02:00
2017-05-16 08:44:18 -03:00
2017-11-14 18:01:46 -08:00
2017-09-26 14:58:23 -06:00
2017-11-16 09:10:59 -08:00
2017-07-07 14:04:47 -07:00
2017-07-14 13:51:29 -06:00
2017-08-19 11:02:53 -07:00
2017-07-14 13:51:34 -06:00
2017-07-14 13:51:42 -06:00
2017-07-14 13:51:43 -06:00
2017-07-14 13:51:43 -06:00
2017-07-14 13:51:45 -06:00
2017-07-14 13:51:45 -06:00
2017-07-14 13:51:46 -06:00
2017-07-14 13:57:58 -06:00
2017-07-14 13:57:59 -06:00
2017-07-06 08:23:30 +02:00
2017-07-07 13:14:14 +02:00
2017-07-14 13:58:04 -06:00
2017-07-14 13:58:14 -06:00
2017-07-14 13:58:10 -06:00
2017-07-14 13:58:11 -06:00