diff options
author | Jaegeuk Kim <jaegeuk@kernel.org> | 2019-03-14 00:15:08 +0100 |
---|---|---|
committer | Jaegeuk Kim <jaegeuk@kernel.org> | 2019-03-14 18:20:54 +0100 |
commit | aff7b628ac2d58616b74789389ebb1e987081f49 (patch) | |
tree | 96141937c85b75a4316170138414240337b02e9c /fs/f2fs | |
parent | f2fs: fix to avoid deadlock in f2fs_read_inline_dir() (diff) | |
download | linux-aff7b628ac2d58616b74789389ebb1e987081f49.tar.xz linux-aff7b628ac2d58616b74789389ebb1e987081f49.zip |
f2fs: set pin_file under CAP_SYS_ADMIN
Android uses pin_file for uncrypt during OTA, and that should be managed by
CAP_SYS_ADMIN only.
Reviewed-by: Chao Yu <yuchao0@huawei.com>
Signed-off-by: Jaegeuk Kim <jaegeuk@kernel.org>
Diffstat (limited to 'fs/f2fs')
-rw-r--r-- | fs/f2fs/file.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/fs/f2fs/file.c b/fs/f2fs/file.c index 807a97ad2430..012815d816e6 100644 --- a/fs/f2fs/file.c +++ b/fs/f2fs/file.c @@ -2873,8 +2873,8 @@ static int f2fs_ioc_set_pin_file(struct file *filp, unsigned long arg) __u32 pin; int ret = 0; - if (!inode_owner_or_capable(inode)) - return -EACCES; + if (!capable(CAP_SYS_ADMIN)) + return -EPERM; if (get_user(pin, (__u32 __user *)arg)) return -EFAULT; |