diff options
| author | Seth Forshee <seth.forshee@canonical.com> | 2016-04-26 21:36:23 +0200 |
|---|---|---|
| committer | Eric W. Biederman <ebiederm@xmission.com> | 2016-07-01 01:05:09 +0200 |
| commit | 2d7f9e2ad35e4e7a3086231f19bfab33c6a8a64a (patch) | |
| tree | 120e1da5af655549c3a918c4c4e6afcb744e1527 /kernel/cred.c | |
| parent | vfs: Verify acls are valid within superblock's s_user_ns. (diff) | |
| download | linux-2d7f9e2ad35e4e7a3086231f19bfab33c6a8a64a.tar.xz linux-2d7f9e2ad35e4e7a3086231f19bfab33c6a8a64a.zip | |
fs: Check for invalid i_uid in may_follow_link()
Filesystem uids which don't map into a user namespace may result
in inode->i_uid being INVALID_UID. A symlink and its parent
could have different owners in the filesystem can both get
mapped to INVALID_UID, which may result in following a symlink
when this would not have otherwise been permitted when protected
symlinks are enabled.
Signed-off-by: Seth Forshee <seth.forshee@canonical.com>
Acked-by: Serge Hallyn <serge.hallyn@canonical.com>
Signed-off-by: Eric W. Biederman <ebiederm@xmission.com>
Diffstat (limited to 'kernel/cred.c')
0 files changed, 0 insertions, 0 deletions