Files
linux/fs/xfs
Dwight Engen bdd0a8e5ac xfs: add capability check to free eofblocks ioctl
commit 8c567a7fab upstream.

Check for CAP_SYS_ADMIN since the caller can truncate preallocated
blocks from files they do not own nor have write access to. A more
fine grained access check was considered: require the caller to
specify their own uid/gid and to use inode_permission to check for
write, but this would not catch the case of an inode not reachable
via path traversal from the callers mount namespace.

Add check for read-only filesystem to free eofblocks ioctl.

Reviewed-by: Brian Foster <bfoster@redhat.com>
Reviewed-by: Dave Chinner <dchinner@redhat.com>
Reviewed-by: Gao feng <gaofeng@cn.fujitsu.com>
Signed-off-by: Dwight Engen <dwight.engen@oracle.com>
Signed-off-by: Ben Myers <bpm@sgi.com>
Cc: Kees Cook <keescook@google.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2013-12-08 07:29:27 -08:00
..
2013-05-07 18:45:36 -05:00
2013-04-27 12:49:32 -05:00
2013-05-07 18:45:36 -05:00
2011-08-12 16:21:35 -05:00
2011-08-12 16:21:35 -05:00
2012-11-19 20:11:24 -06:00
2013-04-21 14:57:43 -05:00
2013-05-30 17:26:31 -05:00
2013-05-30 17:26:31 -05:00
2013-05-07 18:45:36 -05:00
2013-05-30 17:26:31 -05:00
2012-11-19 20:11:24 -06:00
2011-07-13 13:43:48 +02:00
2011-08-12 16:21:35 -05:00
2011-08-12 16:21:35 -05:00
2013-06-06 10:50:35 -05:00
2011-03-07 10:09:35 +11:00
2011-08-12 16:21:35 -05:00
2013-05-07 20:16:25 -07:00
2012-05-14 16:20:54 -05:00
2011-08-12 16:21:35 -05:00
2011-08-12 16:21:35 -05:00
2010-12-16 16:05:51 -06:00
2011-08-12 16:21:35 -05:00
2013-05-07 18:45:36 -05:00
2013-05-07 18:45:36 -05:00
2013-05-07 18:45:36 -05:00
2013-06-06 10:50:35 -05:00
2013-04-21 14:58:22 -05:00
2013-06-06 10:50:35 -05:00
2012-09-18 01:01:39 -07:00
2013-04-27 13:05:18 -05:00
2012-10-17 12:01:25 -05:00
2013-05-07 18:45:36 -05:00
2012-01-03 22:55:00 -05:00
2011-08-12 16:21:35 -05:00
2013-05-07 18:45:36 -05:00